Parse output

Questions
1

data : https://test.com:test:pass
config :
BLOCK:Parse
input = @input.URL
leftDelim = “net:”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

BLOCK:Parse
input = @input.URL
rightDelim = “:http”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

BLOCK:Parse
input = @input.URL
leftDelim = “com:”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

question : how to make output working like not loop or smth?

2

I’m not sure I understand, can you explain better please?

3

with that config will output : test:pass
but when i switch parse block
BLOCK:Parse
input = @input.URL
leftDelim = “net:”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

BLOCK:Parse
input = @input.URL
leftDelim = “com:”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

BLOCK:Parse
input = @input.URL
rightDelim = “:http”
SAFE
MODE:LR
=> VAR @output
ENDBLOCK

will output nothing

4

Which wordlist type are you using? Maybe it’s not the best in this case, and you need to create a custom one. Please read the docs here Wordlists | OpenBullet 2

5

i am using worlist contain
url:user:pass
user:pass:url
type: maybe url?
and i read general info docs and maybe separator is what i was looking for but docs only have for like 1 “:” and when there is more than “:” the wordlist will slice first “:”
any idea to slice url user pass ?

6

If you want to handle url:user:pass, you have to know 2 things

  1. The url itself has a : (e.g., http://example.com) so using : to split is not a good idea. Maybe use url|user|pass which is better.
  2. You need to create a custom wordlist type, edit Environment.ini to add it, following the docs I linked, and then restart OB2.
7

so my combo must be url|user|pass instead url:user:pass?

8

Well yeah otherwise it would split http://example.com:user:pass into three chunks:

  • URL = http
  • USER = //example.com
  • PASS = user

Since it splits by the : character.

1 Like