Santandersecurityresearch
Create integration with MiTM tools
Description
Drheader currently needs a list of headers to run a bulk scan. It would be a good idea to integrate this with the most common MiTM tools, as ZAP/Burp, so drheader can read the headers in the traffic captured and run the scan against that data
this seems like a good idea.
This looks like it could be done as plugin , we don't have that system in place yet but we probably should.
Creating the plugin system would also mean that the default usage of requests to fetch headers could be re-implemented as plugin.
Other possible input plugins could include browser integrations or testing frameworks
I just opened an issue to ZAP guys to ask for their recommendation on how to integrate it. https://github.com/zaproxy/zaproxy/issues/5687