MCPcopy Create free account
hub / github.com/EASY233/BpScan / ParamAddPocGet

Method ParamAddPocGet

BPScan/src/main/java/burp/scan/Log4jScan.java:89–105  ·  view source on GitHub ↗
(String header)

Source from the content-addressed store, hash-verified

87
88 //对get请求的参数添加poc
89 public static String ParamAddPocGet(String header) throws UnsupportedEncodingException {
90 List<String> heads = Arrays.asList(header.split(" "));
91 if(heads.get(1).contains("?")){
92 String uri_total = "";
93 String[] requris = heads.get(1).split("\\?");
94 String[] requries = requris[1].split("&");
95 for (String uri_single : requries){
96 String[] uri_single_lists = uri_single.split("=");
97 uri_total = uri_total + uri_single_lists[0] + "=" + Getpoc(true) + "&";
98 }
99 uri_total = requris[0] + "?" + uri_total.substring(0,uri_total.length()-1);
100 stdout.println(heads.get(0) + " " + uri_total + " " + heads.get(2));
101 return heads.get(0) + " " + uri_total + " " + heads.get(2);
102 }else{
103 return header;
104 }
105 }
106
107 public static String ParamAddPocPost(String body) throws UnsupportedEncodingException {
108 if(body.contains("=") && !body.contains("{")){

Callers 1

ScanMainMethod · 0.95

Calls 1

GetpocMethod · 0.95

Tested by

no test coverage detected