You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During a penetration test I was faced with an application which uses authentication inside the URL as a query parameter, I was using gobuster in dir mode to try to enumerate the endpoints however all of them seemed to return 401 if the parameter was not set.
Feature Request
Could it be possible to add a feature that lets users specify a query string to be added to the end of each request? This could be done with a -Q or --query parameter when calling gobuster
Example
$ gobuster dir -u http://example.com/api/v1/ -w wordlist.txt -Q 'secret=blargh'
$ gobuster dir -u http://example.com/api/v1/ -w wordlist.txt --query 'secret=blargh'
PS
Thanks for your work on the tool, it's one of my all time favorites
The text was updated successfully, but these errors were encountered:
Paradoxis
changed the title
Feature Request: Query string
Feature Request: Ability to add query string to each request
May 26, 2020
The issue
During a penetration test I was faced with an application which uses authentication inside the URL as a query parameter, I was using gobuster in
dir
mode to try to enumerate the endpoints however all of them seemed to return 401 if the parameter was not set.Feature Request
Could it be possible to add a feature that lets users specify a query string to be added to the end of each request? This could be done with a
-Q
or--query
parameter when calling gobusterExample
PS
Thanks for your work on the tool, it's one of my all time favorites
The text was updated successfully, but these errors were encountered: