BurpFeed

A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs. Originally an idea that @InfoSecPS and I threw together, then I tweaked and hacked together this chaos!

The tool is written in both Python and Go, GoBurpFeed was written by Mantis and ZephrFish while the python version has been a collaboration between ZephrFish, InfosecPS and Mantis.

GoBurpFeed will be the only supported version from now on as the python version has been migrated to a legacy state.

A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs.

GoBurpFeed Setup

To set this up, you'll need the following:

• Burp Suite
  • FLOW Burp Extension (https://github.com/hvqzao/burp-flow), also available on BApps store :-)
  • GO Binary either downloaded or build from easy install below.

Install

go install github.com/ZephrFish/BurpFeed@latest

Manual Setup

To set this up, you'll need the following:

• Burp Suite
• Go

Chuck your target URLs or IPs in a file, can be named whatever but must have http/https prefixed at the start of line for this to work.

When you've got all of this setup you can refer to usage.

Usage:

go build .
./BurpFeed -h
Usage of BurpFeed:               
-debug         
  Turn on debug mode                            
-filename string
  ./path/to/urls.txt
-proxy string
  The HTTP proxy you want to feed it through (default "http://127.0.0.1:8080")     
-threads int
  Number of concurrent jobs to run (default 10) 

Headers File

The headers file should split by new-lines and in the HeaderName: HeaderValue format.

This can be used to set custom headers, cookies, etc. For example:

Cookie: authCookie=VGVzdHZhbHVl;
Authorization: Bearer VGVzdHZhbHVl

Gophers

The gopher was found in this repository: https://github.com/egonelbre/gophers/