How this template works
APIs Selection
The template filters requests based on two conditions. It checks if the request payload or query parameter value matches a regular expression pattern that represents a file path. If a match is found, the file path is extracted and stored as a variable called "file_path".
Execute request
The template then modifies the query parameter and body parameter named "file_path" in the request. It replaces the parameter value with a list of predefined file paths from the "wordLists" section of the template.
Validation
After the request is executed, the template validates the response payload using a regular expression pattern. It checks if the response contains a string that starts with "root:" and ends with ":0:0:". If the pattern is matched, the validation is considered successful. That's it! The template filters requests, modifies parameters, and validates responses to test for potential Local File Inclusion vulnerabilities.