-
Notifications
You must be signed in to change notification settings - Fork 0
/
BurpFuzz.py
63 lines (51 loc) · 1.93 KB
/
BurpFuzz.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
from burp import IBurpExtender
from burp import IIntruderPayloadGeneratorFactory
from burp import IIntruderPayloadGenerator
from java.util import List, ArrayList
import random
class BurpExtender(IBurpExtender, IIntruderPayloadGeneratorFactory):
def registerExtenderCallbacks(self, callbacks):
self._callbacks = callbacks
self._helpers = callbacks.getHelpers()
callbacks.registerIntruderPayloadGeneratorFactory(self)
return
def getGeneratorName(self):
return "BHP Payload Generator"
def createNewInstance(self, attack):
return FuzzingFrame(self, attack)
class FuzzingFrame(IIntruderPayloadGenerator):
def __init__(self, extender, attack):
self._extender = extender
self._helpers = extender._helpers
self._attack = attack
self.max_payloads = 10
self.num_iterations = 0
return
def sequentialPayloads(self):
if self.num_iterations == self.max_payloads:
return False
else:
return True
def iterativePayload(self, current_payload):
payload = "".join(chr(x) for x in current_payload)
payload = self.contort_Payload(payload)
self.num_iterations += 1
return payload
def reset(self):
self.num_iterations = 0
return
def contort_Payload(self, original_payload):
picker = random.randint(1, 3)
offset = random.randint(0, len(original_payload)-1)
payload = original_payload[:offset]
if picker == 1:
payload += "'"
if picker == 2:
payload += "<script>alert('BHP!');</script>"
if picker == 3:
chunk_length = random.randint(len(payload[offset:]), len(payload)-1)
repeater = random.randin(1, 10)
for i in range(repeater):
payload += original_payload[offset:offset + chunk_length]
payload += original_payload[offset:]
return payload