Comments (5)
Hi Regala
No that is not correct. You confound it with "match and replace" which does not work.
As it is common in API's we use the first section in path to describe the object and followed by the value of the object. In your example the object is "users" and the value is "12345" (or "admin"). Means you want to replace the parameter called "users" with the value "admin". So just type in "users" as parameter name ;-)
Please see also my example on the Readme page: https://github.com/simioni87/auth_analyzer#replacement-location
Have fun!
from auth_analyzer.
OOOOOH. You're totally right, and I overlooked the parameter replacement section for some reason
from auth_analyzer.
(p.s. in that particular example in the readme, presenet
should be present
. Thanks again, keep up the good work
from auth_analyzer.
Thank you too :) Your issue has disclosed the bug that the path replacement does not correctly work if the parameter value does not ends with a slash. As we see in your example GET /api/v1/smart/users/12345/admin/1.1
Will be fixed with the next release.
Thaaanks :)
from auth_analyzer.
Hi @simioni87 , hope all is well!
I've been doing some more tests with the extension and often a scenario I encounter is this:
- Having a replacement string occurring in multiple places, with different "parameter" names
so e.g. in the url it might be passed as?organizationId
, where as in the cookie it's underorg=
and in the POST body isid=
In this scenarios the easiest thing to do would be to just apply a "match and replace all" rule on the request, regardless of the parameter name. Is this something possible to do at the moment?
This is a feature I still use heavily on Autorepeater, where the following three options shine:
Let me know what you think, thanks!
from auth_analyzer.
Related Issues (20)
- Option to disable URL encoding HOT 2
- Extra requests when "Stop Drop Requests" is enabled for non-Proxy traffic HOT 10
- Feature request: easier navigation when in expanded diff view HOT 1
- Feature Request: Null as Parameter Value HOT 2
- XML Parser Error When Opening with Excel HOT 3
- Export Table Data with Dropped Requests HOT 2
- [Feature request] - User supplied extra rules for difference algorithm
- Issue when parsing cookie HOT 4
- Feature Request: Export Table Data to a file and Import to Burp HOT 1
- The option to *regex match and replace* parts of the request without relying on parameter HOT 3
- [Feature Request] - Filter on request and response body HOT 3
- Match-Replace only works on single instance HOT 2
- Why's it sending `OPTIONS` request when I'm just specifying headers to delete HOT 2
- Enhancement - Differentiation of 302 based on the Location header HOT 3
- Feature Request: Include Comment Column in Export Table Data HOT 2
- Exclude Filetypes match may bug HOT 8
- More Pending Request Queue HOT 3
- Future request HOT 4
- Issues with replacement not working HOT 3
- Export and Import features not available anymore? HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from auth_analyzer.