0x90.org

n a v i g a t i o n

news
releases
wasted.cycles
like what you see?
contact

GET /whos?your=body&where=on_the_floor

Basic Usage

Mezcal will allow you to build a custom request, insert variables and edit content before sending it out to the server. When first executed, you will be presented with a window similar to this:


This is the screen for entering a server and port to send data to and enable logging and flagging by patterns. Mezcal has the ability to log all requests and responses, only requests, only responses or it can log responses that contain a string that you select. Logging is very versatile.


Variable Insertion



Here you can select different variable types by simply clicking the drop-down box and giving them a unique name. The Count Up variable will create an integer variable that increments for each request that is sent out. The Count Down variable will do the opposite, for each request that is sent this variable will be decreased by one value. The From File variable will allow you to load a list of values to be inserted into a dynamic variable in the request.



After creating your desired variable simply click Add Variable to insert it into the request. You can insert as many variables as you require for your request. To remove a variable simply select it and click Remove Variable.


Crafting a Request




The default HTTP request built into Mezcal will retrieve the source of a page. This is the basis for requesting data and can be easily modified by simply editing the actual HTTP request on the screen. All entries can be manipulated here.



Note that both variables (faerie and senor) are being used within this request. Their values will change for each request that is processed and sent out. Once you have manipulated your request as desired, simply click Send to begin sending requests. You can also abort execution and stop requesting by clicking the Stop button at anytime.

Reading Responses and Results

The Response tab will log all responses received from the server since the first request and display them. You can also edit responses within the window and copy them your request window.



The fields within this window can be cleared whenever you like by clicking the Clear button above it. This button will clear all fields within the current tab. You will not lose any settings in any other tabs apart from the one you are clearing.


Results

The Results tab will show all positive results if you added a regex to flag back on the Configuration tab. It will display the headers for each request that matched the string aswell as the content containing it.



Here we can see that the request containing the pattern from the Configuration tab is found and displayed including the full response with headers and the full content from which the pattern was found in.