Skip to content

Latest commit

 

History

History
54 lines (42 loc) · 1.74 KB

README.md

File metadata and controls

54 lines (42 loc) · 1.74 KB
Raw

drawing

Match and Replace Script for BurpSuite

Main Features

  • Generate Match and Replace options from a file
  • Create presets for your attack
  • Output to a JSON file

Usage

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

Optional Arguments:

  • -h, --help show this help message and exit
  • -f FILE, --file FILE Parameters/Variables to be Matched
  • -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
  • -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
  • -s REPLACE, --replace REPLACE Literal String to Replace
  • -x, --tmp replace with regex and add a temp var
  • -o OUTPUT, --output OUTPUT Option JSON file

Examples

Removing Headers/Parameters
  • ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json
Adding Headers/Parameters
  • ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json
Replacing Headers/Parameters
  • You might use the argument -x to use the Regex Match and Replace option
  • ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

Contribution, Credits & License

Ways to contribute

  • Suggest a feature
  • Report a bug
  • Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.