xr0r / matchandreplace Goto Github PK

• Generate Match and Replace options from a file
• Create presets for your attack
• Output to a JSON file

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

• -h, --help show this help message and exit
• -f FILE, --file FILE Parameters/Variables to be Matched
• -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
• -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
• -s REPLACE, --replace REPLACE Literal String to Replace
• -x, --tmp replace with regex and add a temp var
• -o OUTPUT, --output OUTPUT Option JSON file

• ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json

• ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json

• You might use the argument -x to use the Regex Match and Replace option
• ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

• Suggest a feature
• Report a bug
• Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.