8000 GitHub - albinowax/bambdas: Bambdas collection for Burp Suite Professional and Community. · GitHub
[go: up one dir, main page]

Skip to content
albinowaxPublic

About

Bambdas collection for Burp Suite Professional and Community.

Resources

Code of conduct

Contributing

Stars

1 star

Watchers

0 watching

Forks

 
 

Repository files navigation

This hides your repeater request behind an innocent GET request. It's useful for bypassing server-level validation sometimes.

Author: James Kettle (https://github.com/albinowax)

var connectionId = utilities().randomUtils().randomString(8);
var options = RequestOptions.requestOptions().withConnectionId(connectionId).withHttpMode(HttpMode.HTTP_1);

// Send a simple GET / HTTP/1.1 to the target as the precusor request
var url = requestResponse.request().url();
var precursorRequest = HttpRequest.httpRequestFromUrl(url); 
precursorRequest = precursorRequest.withPath("/").withHeader("Connection", "keep-alive");

// Send the attack in the repeater, and update the response pane
api().http().sendRequest(precursorRequest, options);
var response = api().http().sendRequest(requestResponse.request(), options);
httpEditor.responsePane().set(response.response().toByteArray());

About

Bambdas collection for Burp Suite Professional and Community.

Resources

Code of conduct

Contributing

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages

0