Skip to content

added ability to force get params (force_get section)#1163

Open
callightmn wants to merge 2 commits into
kgretzky:masterfrom
vaadata:feature/force_get
Open

added ability to force get params (force_get section)#1163
callightmn wants to merge 2 commits into
kgretzky:masterfrom
vaadata:feature/force_get

Conversation

@callightmn

Copy link
Copy Markdown

Hello,

This is to add the ability to force GET parameters.
Instead of adding an entire force_get section, I just added a type: "get" in the existing force_post.

Phishlet snippet:

force_post:
  - path: '/[...REDACTED...]/anchor'
    search:
      - {key: '^co$', search: '.*'}
    force:
      - {key: 'co', value: 'aHR0[...REDACTED...]ZXU6NDQz'}
    type: 'get'

Original request (sent from browser to Evilginx through Burp):

image

Modified request (sent from Evilginx to the remote site through Burp):

image

@callightmn callightmn changed the title added ability to force get params (type: "get" in force_post) added ability to force get params (force_get section) Feb 13, 2025
@callightmn

callightmn commented Feb 13, 2025

Copy link
Copy Markdown
Author

Update: I added a new force_get section instead of using type: "get" in force_post, which could have been confusing. This is basically the same section as force_post with the type parameter defaulting to type: "query" if absent. Currently only this type is supported but type: "path" could be useful to force values in the URL path for instance. The snippet above now is:

force_get:
  - path: '/[...REDACTED...]/anchor'
    search:
      - {key: '^co$', search: '.*'}
    force:
      - {key: 'co', value: 'aHR0[...REDACTED...]ZXU6NDQz'}
    type: 'query'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant