Plugin to list parameters & values
Created by: treadie
Just chasing a simple plugin that will create a list of all the parameter names that are discovered during a scan. Where the parameter has a defined/default value then this should also be collected.
The use case for this would be to run a basic crawl --checks -
with the plugin enabled so that with the output of the plugin I can better define the default inputs (parameters and their values) that will get used. Once the default in inputs are defined then I will run a full scan.
In certain cases, doing this will greatly increase the crawl coverage on a lot of applications where the default values do not let you proceed past a specific form. The plugin will just aid in making this process quicker and easier.
Reference: https://www.owasp.org/index.php/Identify_application_entry_points_%28OTG-INFO-006%29