Santandersecurityresearch/DrHeader

Create integration with MiTM tools

javixeneize opened this issue · 2 comments

Description

Drheader currently needs a list of headers to run a bulk scan. It would be a good idea to integrate this with the most common MiTM tools, as ZAP/Burp, so drheader can read the headers in the traffic captured and run the scan against that data

this seems like a good idea.

This looks like it could be done as plugin , we don't have that system in place yet but we probably should.

Creating the plugin system would also mean that the default usage of requests to fetch headers could be re-implemented as plugin.

Other possible input plugins could include browser integrations or testing frameworks

I just opened an issue to ZAP guys to ask for their recommendation on how to integrate it. zaproxy/zaproxy#5687