Web Service & API Attacks - Skills Assessment

@krellkrypto

It breaks the payload! I recommend using python f-string substitution to dump payloads into the script. Look at how they do it in automate.py for a good example.

Basically:

userinput = input("User input here: ")
# Anything input into the userinput variable will 
# get substituted right into the payload without breaking it.
fstring_payload_example = f"XML-Payload Stuff {userinput} more payload stuff"

If someone knows why it doesn’t break the XML, please let us know. To be honest, I am too busy(lazy) right now to dig into it.
-onthesauce

2 Likes