Skip to content
master
Switch branches/tags
Code

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
May 12, 2019
May 12, 2019
May 13, 2019
May 12, 2019

drawing


Match and Replace Script for BurpSuite

Main Features

  • Generate Match and Replace options from a file
  • Create presets for your attack
  • Output to a JSON file

Usage

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

Optional Arguments:

  • -h, --help show this help message and exit
  • -f FILE, --file FILE Parameters/Variables to be Matched
  • -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
  • -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
  • -s REPLACE, --replace REPLACE Literal String to Replace
  • -x, --tmp replace with regex and add a temp var
  • -o OUTPUT, --output OUTPUT Option JSON file

Examples

Removing Headers/Parameters
  • ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json
Adding Headers/Parameters
  • ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json
Replacing Headers/Parameters
  • You might use the argument -x to use the Regex Match and Replace option
  • ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

Contribution, Credits & License

Ways to contribute

  • Suggest a feature
  • Report a bug
  • Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.

About

Match and Replace script used to automatically generate JSON option file to BurpSuite

Resources

License

Releases

No releases published

Packages

No packages published

Languages