Request send to https by default when using --rawdata about dalfox

[rudSarkar]

This is not a bug because there is an option to "force http on rawdata mode". Find the below reference the HTTP by default is set to false, If you need to send the HTTP request please use --http so you can send a request via HTTP.

Command for force HTTP on rawdata mode

dalfox file --rawdata raw_request.txt --http --poc-type=http-request

Output

Reference

dalfox/cmd/file.go

Line 267 in efcef0f

fileCmd.Flags().Bool("http", false, "Using force http on rawdata mode")

Please @hahwul close this issue.

[hahwul]

Hi @darshanpjpt
As @rudSarkar explained, when using rawdata, it is basically recognized as HTTPS and can be fixed as HTTP through flag. This is because you cannot identify whether HTTP or HTTPS was used in the Raw HTTP request.

As it is not a bug, I will close the issue. If there's a problem, please re-open it again :D