Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Ability to add query string to each request #227

Open
Paradoxis opened this issue May 26, 2020 · 2 comments
Open

Feature Request: Ability to add query string to each request #227

Paradoxis opened this issue May 26, 2020 · 2 comments

Comments

@Paradoxis
Copy link

Paradoxis commented May 26, 2020

The issue

During a penetration test I was faced with an application which uses authentication inside the URL as a query parameter, I was using gobuster in dir mode to try to enumerate the endpoints however all of them seemed to return 401 if the parameter was not set.

Feature Request

Could it be possible to add a feature that lets users specify a query string to be added to the end of each request? This could be done with a -Q or --query parameter when calling gobuster

Example

$ gobuster dir -u http://example.com/api/v1/ -w wordlist.txt -Q 'secret=blargh'
$ gobuster dir -u http://example.com/api/v1/ -w wordlist.txt --query 'secret=blargh'

PS

Thanks for your work on the tool, it's one of my all time favorites

@Paradoxis Paradoxis changed the title Feature Request: Query string Feature Request: Ability to add query string to each request May 26, 2020
@OJ
Copy link
Owner

OJ commented Jun 1, 2020

Hello @Paradoxis. Thanks very much for the suggestion. I think it's a good idea and one what we should consider adding for sure.

Leave it with me and I'll have a think about what it might look like. I think what you've suggested for parameterisation is good.

Watch this space!

@OJ OJ self-assigned this Jun 1, 2020
@ghost
Copy link

ghost commented Feb 24, 2021

hi there @OJ , if you dont mind or have no problem, i would like to work on this issue please

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants