Using -headless in combination with -automatic-form-fill prevents form submission

[acardnell-intruder]

katana version:

Version 1.0.4

Current Behavior:

Running Katana with -headless and -automatic-form-fill no longer submits POST requests.

Expected Behavior:

Any rendered forms to be submitted in a similar fashion to the non-headless mode.

Steps To Reproduce:

Running the following command:

katana -u http://testphp.vulnweb.com -automatic-form-fill -proxy http://localhost:8080

I see these requests (proxied through Burp shown above):

However, if I run the same command with the addition of the -headless option, I no longer see the POST requests of the forms being sent.

If you need any more information let me know.

[acardnell-intruder]

So I did a bit more investigation and found that if I run the command with the -verbose flag I see the following output in the console:

However, when monitoring those same requests it seems the POST requests are actually sent as GET requests with no arguments:

[ricky-algorime]

yea, not fixed in 1.0.5

[thepoorhacker]

Actually, if you enable "jsonl output format" (-j) along with headless mode you will see POST requests, but for some reason, no requests are being sent through the proxy.