nuclei

nuclei copied to clipboard

Nuclei version:

v3.2.2

Current Behavior:

template:

id: race-test

info:
  name: race-test
  author: known


http:
  - raw:
      - |
        POST /upload/ HTTP/1.1
        Host: {{Hostname}}
        Content-Type: multipart/form-data; boundary={{randstr}}
 
        --{{randstr}}
        Content-Disposition: form-data; name="file"; filename="{{randstr_2}}.png"

        {{randstr_1}}
        --{{randstr}}--

      - |
        GET /upload/{{randstr_2}}.png HTTP/1.1
        Host: {{Hostname}}

    race: true
    race_count: 30
    matchers:
      - type: word
        part: body
        words:
          - "{{randstr_1}}"

only request http 1 .

Expected Behavior:

request http 1 and http 2 together at the same time.

Steps To Reproduce:

Anything else:

I think this is the expected behavior as of now, single requests are sent in a race-fashion singularly. Are you looking into sending as a unique block the first request concatenated to the second one?

yes.