We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
没记录包体?
The text was updated successfully, but these errors were encountered:
有的啊,你随便在里面访问一个有post的网页都能看到是有“包体”的。 不过从你的内容看,你测试上传漏洞的这个应该是还没公开的上传漏洞吧(.NET的公开了),包体里面存在多个"\r\n\r\n",会导致包体解析出现问题(这个我特么昨天才发现),明天我发布个1.0.0.2版本的你说的这个问题已经修复好了
Sorry, something went wrong.
大佬,我又来了,我下载了你的最新版,那个旧的问题还是没有修复。。就是上传文件的文件没有,但是post的其他数据的确是有的,所以我猜还需要修复下。
我认真的复现你的问题,发现在上传文件这块真的会出现无法获取Request Payload,程序本来采用的是WebResourceResponseReceived的方式来获取发送接收的数据,一开始我感觉可能是代码写法太Low不大高级,后来调用了DevTools的GetDevToolsProtocolEventReceiver...发现结果一致。实在没办法使用EDGE和Chrome浏览器进行F12调试发现基于Chrome内核的都回出现一个一致的问题:multipart/form-data 表单上传的都看不到Request Payload... 最后查阅了一些相关资料,大致的结论是... "Chrome 开发者工具不显示数据,因为开发者出于性能原因选择不显示,并承认这是当前设计的限制。",所以··· 这个问题我尽量看有没有其他办法解决,毕竟目前来看是Chrome内核限制了,我再研究研究。
No branches or pull requests
没记录包体?
The text was updated successfully, but these errors were encountered: