How can I make Arachni cope with dual submit buttons?
Created by: sitsofe
When you have forms like the following Arachni will never choose XSS:
<!DOCTYPE html>
<html>
<head>
<title>Arachni double submit test</title>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8">
</head>
<body>
<?
if ($_POST['choice'] == "XSS") {
echo "<script>" . $_POST['XSS'] . "</script>"; # XSS Time!
} else {
?>
<form action="arachnitest.php" method="post">
<input name="XSS" value="; alert('XSS Time!');">
<input type="submit" name="choice" value="XSS">
<input type="submit" name="choice" value="No XSS">
</form>
<?
}
?>
</body>
</html>(yeah I know, PHP but it's just for illustration purposes). If the submit element order is switched around then Arachni correctly submits choice=XSS every time.
I have tried to use "Input Values to use to fill in inputs" (--input-value) via the web interface to force the issue but to no avail.