Skip to content
Match and Replace script used to automatically generate JSON option file to BurpSuite
Branch: master
Clone or download
Latest commit e0058c5 May 13, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE Adding LICENSE May 12, 2019
README.md Update README.md May 12, 2019
backup.json Init 3 May 12, 2019
generate.py Fix Regex May 13, 2019
logo.jpg Add files via upload May 12, 2019
parameters.txt Init 3 May 12, 2019
sc1.png Add files via upload May 12, 2019
sc2.png Add files via upload May 12, 2019

README.md

drawing


Match and Replace Script for BurpSuite

Main Features

  • Generate Match and Replace options from a file
  • Create presets for your attack
  • Output to a JSON file

Usage

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

Optional Arguments:

  • -h, --help show this help message and exit
  • -f FILE, --file FILE Parameters/Variables to be Matched
  • -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
  • -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
  • -s REPLACE, --replace REPLACE Literal String to Replace
  • -x, --tmp replace with regex and add a temp var
  • -o OUTPUT, --output OUTPUT Option JSON file

Examples

Removing Headers/Parameters
  • ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json
Adding Headers/Parameters
  • ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json
Replacing Headers/Parameters
  • You might use the argument -x to use the Regex Match and Replace option
  • ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

Contribution, Credits & License

Ways to contribute

  • Suggest a feature
  • Report a bug
  • Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.

You can’t perform that action at this time.