PortSwigger/param-miner

Add 'Guess body parameters' to context menu for GET requests

MMquant opened this issue · 2 comments

Suppose I have a GET request which I'm inspecting from the Target tab

GET /error/HTTP_VARIANT_ALSO_VARIES.html.var HTTP/1.1
Host: 111.222.22.107

when I want to guess body parameters I have to send it to Repeater, change request method and add a dummy parameter to the request body.

POST /error/HTTP_VARIANT_ALSO_VARIES.html.var HTTP/1.1
Host: 193.33.22.107
Content-Type: application/x-www-form-urlencoded
Content-Length: 0

a=1

Now right-click context menu offers Guess body parameters.

Wouldn't be handy if I could choose Guess body parameters directly from Target tab even on GET requests?

If you choose 'Guess body parameters' on a GET request would you expect Param Miner to change the method to POST? Or use a fat-GET?

Yes, I would expect Param Miner to change the method to POST.