HTTP Handlers

This pentesting tool is useful for logging all HTTP/S requests to a specified handler URL, capturing details such as:

• Source IP

• Request Method

• URL Parameters

• User Agent

• Operating System

• Request Body

• Date

The tool offers several custom functionalities:

• Redirect to a Custom URL:

This feature logs the request and its data, then automatically redirects to a specified URL.

The payload format is: https://app.pentest-tools.com/logger/<id>?redir=https://pentest-ground.com

Note: We are aware that this feature introduces an Open Redirect vulnerability in app.pentest-tools.com.

• Tracking Image:

This feature stores a 1x1 pixel image, useful for tracking actions like when a victim opens an email.

Supported formats include PNG, JPG, JPEG, and GIF.

The payload format is: https://app.pentest-tools.com/logger/<id>?file=a.png

These functionalities allow you to easily create Proof of Concepts to demonstrate vulnerabilities such as XSS, data exfiltration, or social engineering.