Skip to content

Commit

Permalink
Merge pull request #6 from Hackmanit/dev
Browse files Browse the repository at this point in the history
Dev
  • Loading branch information
m10x authored Jan 2, 2024
2 parents de0be86 + 9380595 commit a78d5d2
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 2 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -173,7 +173,7 @@ A blog post providing more information about template injection and [TInjA – t

[Soon to be released](https://www.hackmanit.de/en/blog-en/)

The Template Injection Playground was developed as a part of a master's thesis by Maximilian Hildebrand.
TInjA was developed as a part of a master's thesis by Maximilian Hildebrand.
You can find results of the master's thesis publicly available here:
- [Template Injection Table](https://github.com/Hackmanit/template-injection-table)
- [Template Injection Playground](https://github.com/Hackmanit/template-injection-playground)
Expand Down
1 change: 1 addition & 0 deletions cmd/root.go
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,7 @@ func bindFlags(cmd *cobra.Command) {
}

func getLogo() (logo string) {
// source: https://patorjk.com/software/taag/#p=display&f=Slant%20Relief&t=TInjA
logo = `
__/\\\\\\\\\\\\\\\__/\\\\\\\\\\\______________________________/\\\\\\\\\____
_\///////\\\/////__\/////\\\///______________________/\\\___/\\\\\\\\\\\\\__
Expand Down
2 changes: 1 addition & 1 deletion pkg/analyze.go
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ The `analyze.go` file contains a package called `pkg` that provides functionalit
- `checkBodyIndicator(body string, polyglot string, reflection structs.Reflection) (string, string)`: This method checks for indicators in the response body. It takes in the body, polyglot, and a `Reflection` struct representing the reflection point. It handles specific cases for different template engines and returns the response and conclusion based on the indicators found.
- `checkForDistinctTemplateEngineResponse(polyglot string, stringBetween string)`: This method checks if the recieved response was definitely rendered by a template engine. This is the case, if stringBetween matches with an expected response of at least one template engine.
- `checkForDistinctTemplateEngineResponse(polyglot string, stringBetween string)`: This method checks if the received response was definitely rendered by a template engine. This is the case, if stringBetween matches with an expected response of at least one template engine.
- `setTemplateEngine(names []string)`: This method sets the possible template engines based on the identified engine names. It takes in a slice of engine names as a parameter.
Expand Down

0 comments on commit a78d5d2

Please sign in to comment.