I need a quick test of a website or an application without changing the server code, for example, I wish to add cookies to a request header or CORS headers to a server response. So, what Cisco product can do such a job:
HTTP Modifier Rules: provide regexp rules to modify the HTTP header and/or content. You can provide as many modifier rules as you need. Grouping ($1, $2, etc) and special symbols (\r, \n, \t) are allowed. HTTP Debugger will automatically recalculate the Content-Length of the modified content.
You can test HTTP modifier rules for outgoing HTTP traffic by visiting our View Browser Headers page.
Note: when adding a HTTP content modifier rules, make sure to provide match rules for a proper content type.
Regexp Samples:
Append New Parameter To The End Of Header:
Regex: (?=\r\n\r\n)
Value: \r\nAccess-Control-Allow-Origin: *
Delete Existing Parameter From Header:
Regex: User-Agent:.*\r\n
Value:
Replace Existing Parameter In Header:
Regex: (Content-Length:).*(?=\r\n)
Value: $1 12345
Replace HTML Tag In Content:
Regex: (<title>).*(</title>)
Value: $1 new title $2
You can create a modifier rule for a particular request/response from grid's context menu.
Note: to improve the performance, it is recommended to disable the HTTP Modifier, if it is not used.
Important: browsers tend to cache Internet connections, therefore it maybe required to restart a browser for changes to take effect.
...or on Ettercap NG filtering like replace(what, with)
this function replaces the string ’what’ with the string ’with’. They can be binary string and must
be escaped. The replacement is always performed in DATA.data since is the only payload which
gets forwarded. The ’DECODED.data’ buffer is used only internally and never reaches the wire.
example:
replace("ethercap", "ettercap")
Thank you.
