Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Custom payload processor / generator

Quiecis F Nov 21, 2018 04:48PM UTC


My intruder scenario is brute forcing uids that are calculated based date.
Current intruder has date payload, that is superb for the job. Now i would like to process these dates with my custom extension that formes uid from date. However there is one to many relationship here - one date generates up to 999 different uids. How can i return multiple processed payloads from my extension processPayload function?

Other possibility would use custom IntruderPayloadGenerator - then comes the question of options for custom payloadgenerator and dates payload already exists with nice from-to interface.


Paul Johnston Nov 28, 2018 03:12PM UTC Support Center agent

As you’ve noticed, payload processors can only return a single item. I think it would be a really good feature for them to be able to return multiple items, and I have added this to the development plan.

In the meantime, I looked at some potential workarounds. However, they all became quite hacky and I didn’t find one I’m happy to recommend to you.

You’ll need to implement you own date generation within your IIntruderPayloadGenerator.


Post Your public answer

Your name
Your email address
Answer