Automatic generator
Payload settings
ORIGINAL
This is where you will input the original string or bytes contained in the REQUEST. This denotes where REQUEST will be different from original one.
In a nutshell, you will let PentestSuite find this string or bytes from the original request and will replace all of its appearance in the original request with the PAYLOAD you have set in the following section.
PAYLOAD
Input the payload that you want to use as a replacement of ORIGINAL. And I am sure you won't just need to replace once. So you can use PAYLOAD DELIMITER in the next section to tell PentestSuite how to split your input here to generate a array.
Directly inject the payload is somehow hard, so there's one gadget in this section called payload adder. Just click this button will let you enter the gadget.
PAYLOAD ADDER
This feature is only provided in the Premium version of PentestSuite.
detail link: https://pentestsuite.blogspot.com/2021/08/payload-adder.html
PAYLOAD DELIMITER
This is where you are going to tell how to split your input in PAYLOAD to generate a array.
OTHERS
DELAY(IN MILLISECOND)
PentestSuite is going to generate request with SOCKET one by one. It will always generate new thread for one request. It will generate as many as the number of PAYLOAD array you have denoted in the previous PAYLOAD and PAYLOAD DELIMITER section.
So this parameter is used to tell PentestSuite how long should the delay between two nearby requests be.
SOCKET REUSE
If you let this switch on, you are telling PentestSuite to use ONLY one socket/SSLSocket in every request that Automatic generator makes.
MESSAGE LIST
You will see that all messages generated by Automatic generator will be displayed here.
Search function
Input the keyword that you want to search and click the search button, you would be able to search anything in the message list, like ip address and the content of the message.
After click, the text of the search button will be converted to CANCEL like this to show that the current message list is the list that contains your keyword.
Do try to long click the button when the text is SEARCH and you will see the pop up window like this to let you configure some details about your search.
You can specify the search scope and reverse your search. Note that reverse searching is very useful when you want to find something weird.
NOTE THAT MESSAGE LIST WILL NOT SHOW THE MESSAGES THAT DOES NOT GET RESPONSE, SO IF YOU ARE TRYING TO SEND THE MESSAGE TO A HOST THAT IS ALREADY DOWN YOU WON'T GET ANY MESSAGES FROM THE MESSAGE LIST.
Comments
Post a Comment