Skip to content
This repository was archived by the owner on Dec 7, 2022. It is now read-only.

Conversation

@homedirectory
Copy link

Purpose

I wanted to use this tool in combination with Burp Suite, but there was no proxy argument for the script, so I implemented proxy support.

Goals

It is now possible to use a proxy to route each request.

Approach

Modified the main file tntfuzzer.py to parse an additional argument --proxy.

Modified CurlCommand and HttpOperation classes to take in an additional argument called proxy and use it in respective methods.

Also I was receiving a strange KeyError. Here is the error log:

Traceback (most recent call last):
  File "/app/tntfuzzer/tntfuzzer.py", line 258, in <module>
    main()
  File "/app/tntfuzzer/tntfuzzer.py", line 252, in main
    tnt.start()
  File "/app/tntfuzzer/tntfuzzer.py", line 155, in start
    response = operation.execute()
  File "/app/tntfuzzer/core/httpoperation.py", line 49, in execute
    if 'path' == parameter['in']:
KeyError: 'in'

This was happening even though the swagger.json file is fine, so I wrapped this call in a try-except block, which handles this error by simply continuing to the next iteration. This fix is present as a separate commit.

Added tests?

No tests added.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant