1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
INCLUDE $TOP/test/config.htb
CLIENT
_REQ $YOUR_HOST $YOUR_PORT
__GET /your/path/to/your/resource?your=params HTTP/1.1
__Host: $YOUR_HOST
__User-Agent: mozilla
__
# enclose it with double quotes
_EXPECT . "HTTP/1.1 200 OK"
_EXPECT . "blafasel \"\\\\foobar\\\\\""
_MATCH body "blafasel \"\\\\([^\"]*)\\\\\"" DEBUG
# enclose it with ';'
_EXPECT . ;blafasel "\\\\foobar\\\\";
# enclose it with 'z' is a little exotic ;)
_MATCH body zblafasel "\\\\([^\"]*)\\\\"z DEBUG2
_WAIT
_REQ $YOUR_HOST $YOUR_PORT
__POST /your/path/to/your/resource?your=params HTTP/1.1
__Host: $YOUR_HOST
__User-Agent: mozilla
__Content-Length: AUTO
__
__|$DEBUG|
__%$DEBUG2%
_EXPECT . "HTTP/1.1 200 OK"
_WAIT
END
SERVER $YOUR_PORT
_RES
_WAIT
__HTTP/1.1 200 OK
__Content-Length: AUTO
__Content-Type: text/html
__
__blafasel "\foobar\"
__
_RES
_EXPECT . "|foobar|"
# enclose it with 'u' is a little exotic ;)
_EXPECT . u%foobar%u
_WAIT
__HTTP/1.1 200 OK
__Content-Length: AUTO
__Content-Type: text/html
__
__==AS2 - 0==
__
END
|
