Hi, so in this lesson we are
going to learn about raw requests. So what
are raw requests these are the requests that we
generally see in our browsers Network
tab or whenever you capture requests
using pubsuit or any other proxy tool
the request are in the format of raw
request.
Now you can also utilize these raw request
in your nuclei template as well.
The tool nuclei supports raw request
to be passed as well.
Raw request can be defined using raw
column in the nuclei template.
Raw request also supports various helper
functions that we are going to see in future.
Helper functions can help in manipulation of
the input for different types of request that you want
to pass along with the template.
So it's the Practical time and let's quickly see how you
can specify a raw request in a template.
So as you can see over here, I have written a
raw request.yeml file that
you can see over here, which is basically a nuclei
template of raw request.
This contains the ID block information block the
request block, which says this time
as Raw.
then you have to specify it using this way
in which I'm specifying now the HTTP
method to be post instead
of get
Remember, you can also specify any HTTP method.
It could be get it could be put options patch.
Delete Etc.
That is basically the sample or
stock or default raw
request that you would see anywhere.
Now there are requests. I'm going
to send a post request to an endpoint
which is post the host is going to be the host
name.
A content type header is there and a custom header has
been added called as hactify header hackify CS
is the value of the header and in
the body, we have specified search equals to Apple here.
If you look carefully we have
not specified the body colon block
instead. We have used the entire raw
request.
Let's see if this and let's run this as
well on our Target.
This time we are going to modify the current
template to Raw request.
Dot yml
And I'm going to hit enter.
As we can see we have configured the proxy
already. Let's go in burpsuit and
let's see the next request that we have received.
You can see the fourth request contains a
parameter indeed. So I'm going to click on that.
And if you look carefully this is a post request
as you can see burp suit
also shows a raw request, which is
exactly in the same format that we have supplied using
nuclei.
We are sending a request to a
specific endpoint which is post.
you can also see search equals to Apple which
was a part of our
raw request as can be seen from here.
Once the request has been sent we can
see we got a response of 404 not found because there
wasn't any endpoint like post.
But I hope you guys got an idea of how
nuclei also support sending raw
request and you can indeed create a
template of raw request as well. That can
be super useful.
Thank you.