simple filter question of uri

Hi Max,

 

 

You can use HTTP::query (Click here) to retrieve the full query string. You can parse individual parameter values using 'URI::query [HTTP::uri] listall' (Click here) to retrieve the value of the listall parameter. You can use string map to remove the parameter name=parameter value string.

 

 

If you read up on these commands and still have questions, reply here with what you've tried and what you're seeing. Note that if the page which receives the requests accepts POST requests, an attacker could include the parameters in the post data. In that case, you'd need to collect the payload, inspect it and potentially rewrite it. To do this, you could use HTTP::collect (Click here) and HTTP::payload.

 

 

Aaron