The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

480

Chapter 13 

■

Automating Bespoke Attacks

70779c13.qxd:WileyRed  9/14/07  3:14 PM  Page 480

---

String buildRequest()

{

// build parameters

StringBuffer urlParams = new StringBuffer();

StringBuffer cookieParams = new StringBuffer();

StringBuffer bodyParams = new StringBuffer();

for (int i = 0; i < params.length; i++)

{

String value = (i == currentParam) ? 

payloads.getPayload() : 

params[i].value;

if (params[i].type == Param.Type.URL) 

urlParams.append(params[i].name + “=” + value + “&“);

else if (params[i].type == Param.Type.COOKIE) 

cookieParams.append(params[i].name + “=” + value + “; “);

else if (params[i].type == Param.Type.BODY) 

bodyParams.append(params[i].name + “=” + value + “&“);

}

// build request

StringBuffer req = new StringBuffer();

req.append(method + “ “ + url);

if (urlParams.length() > 0)

req.append(“?” + urlParams.substring(0, urlParams.length() - 1));

req.append(“ HTTP/1.0\r\nHost: “ + host);

if (cookieParams.length() > 0)

req.append(“\r\nCookie: “ + cookieParams.toString());

if (bodyParams.length() > 0)

{

req.append(“\r\nContent-Type: application/x-www-form-urlencoded”);

req.append(“\r\nContent-Length: “ + (bodyParams.length() - 1));

req.append(“\r\n\r\n”);

req.append(bodyParams.substring(0, bodyParams.length() - 1));

}

else req.append(“\r\n\r\n”);

return req.toString();

}