Here's what I have described briefly in the Google Play Store version description:
Some serious problems have been found and cleared out.
Just like what is said in the above.
What's PROCESSOR?
Processor is a new feature that lets you format your request bytes into a specific form.
Currently it only supports HTTP format in the version 2.7.1, and it's called HTTPMessageProcessor now.
In the request and response sections, you will see a processor button.
If you want to configure which processor to use, just long click it. It will pop up a configuration dialog that lets you to setup.
If you have never configure it ever, it will just use the first processor to process the current content.
Now it has a HTTPMessageProcessor:
You can see it has format the content into the HTTP format and lets you edit it in a more comfortable way.
And it provides two button: CANCEL and GENERATE
If you click GENERATE button, this will trigger it to generate the new content based on the current formatted information, now it's those things like method, path, http protocol, for example.
This HTTPMessageProcessor helps you in two ways mainly.
1 You will find it easier to configure the Content-Length header since it has calculated the content length for you, but it will not force you to make a correct form HTTP request.
2 You can add or remove headers more easily since you know, 'enter' in Android means '\n' only, but HTTP content will need '\r\n'. So this frame helps you to avoid consider these things. As what has mentioned, it will not force you to make a correct form HTTP request. (FOR THE USE LIKE HTTP REQUEST SMUGGLING)
What's REQUEST MODIFIER?
This feature lets you modify the request just at the preflight time, and it is design like PROCESSOR - Module design.
Currently it provides the HTTP REQUEST CONTENT LENGTH CORRECTOR.
Message automatic generator is only responsible for the regular change in the original request. So it will not care if the HTTP request header, Content-Length, is providing the correct number.
If you Click this Switch on, then it will check every request from Message Automatic Generator just before it is sent, and once it has found Content-Length header, it will correct it by calculating the content length. It's useful especially when you are fuzzing POST content.
Content Length is calculated in the request box and response box
This text will change whenever you change the content of the request or response. And it helps you to distinguish the situation where the content length differs.
THE END
That's all contained in the version 2.7.1 of PentestSuite. I hope you would like it!
Feel free to chat with me on Twitter/Instagram/Facebook/Telegram if you have any questions and thoughts!
Comments
Post a Comment