Hi, so in this lesson we
are going to understand about the body.
Nuclear template contains the body block which
is the most important part of the template.
So what this body specify it specifies the request
body that needs to be sent along with
the HTTP request that we are going to send to the
server.
The body is placed in a key value format. That
means you can specify a header
as body colon. Admin equals
to test.
Also to maintain sessions we can reuse the
cookies by supplying cookie reuse as true
into your template.
So let's jump on the Practical time and let's see how we
can do it.
So I have written a body dot yml template that
we can read which contains an ID block,
which is nuclear body block information as
we can see over here.
And the request which says a get
request should be sent off HTTP method
type.
The next part is the path in which we can
see the base URL.
And this is the most important.
Block that we have to see and focus which is
the body.
In body we can see we are supplying search equals
to Apple.
Now, let's run this template and observe the
response.
so
I'm just going to change the template this
time.
And the template that we are going to run is the body Dot
yml and hit enter.
You can see the template has run successfully without any
errors. Let's go to burpsuit and
see the third request that we have captured
right now.
You can see this time.
Burp suit has highlighted parameters in the
third request as you can see a checkbox over here.
Now these parameters are nothing but the body block that we
have provided which is search equals to
Apple where in search is the parameter and apple
is the value supplied to that specific parameter.
While creating custom nuclei templates, it's very
essential that we know how
to write a body when we want to send
a specific request while exploiting a vulnerability.
Maybe you can supply a payload over
here, which allows you to read a file from the
server.
I hope you guys understood how you can use the
body Block in your nuclear template and send it
to the Target.
Thank you.