Skip to content

SSRF Bug Bounty IP DECIMAL by Harshad Shah

Latest

Choose a tag to compare

@hackerassociate hackerassociate released this 17 Nov 09:37
· 8 commits to main since this release
00413ea

IP to Decimal Converter v1.0.0

Release Information

Overview

IP to Decimal Converter is a specialized Burp Suite extension designed for penetration testers and security professionals. This tool automates the process of converting IPv4 addresses to their decimal notation format, enabling advanced security testing scenarios and potential bypass techniques.

Key Features

  • 🔄 One-click IP address conversion to decimal notation
  • 🖱️ Seamless integration with Burp Suite's context menu
  • 📝 Real-time conversion logging
  • 🚀 Automatic request modification
  • 💻 User-friendly interface

Security Testing Applications

  • SSRF Testing: Bypass security controls that filter standard IP formats
  • WAF Evasion: Test WAF rule effectiveness against decimal IP notation
  • Security Control Validation: Verify IP-based security measure effectiveness
  • Network Security Assessment: Enhanced capability for network testing

Technical Details

Requirements

  • Burp Suite Professional
  • Java Runtime Environment (JRE) 17 or later
  • Operating System: Windows, Linux, or macOS

Installation

  1. Download `SSRF-Bugbounty-IP-DECIMAL-by-Harshad.jar from the releases page
  2. Open Burp Suite Professional
  3. Navigate to Extender tab
  4. Click "Add" button
  5. Select the downloaded JAR file
  6. Verify successful loading in the Extensions tab

Usage Instructions

  1. Right-click on any request in Burp Suite
  2. Select "Convert IP to Decimal" from context menu
  3. View converted IPs in the request
  4. Check extension output for conversion details

Changelog

Added

  • Initial release with IP to decimal conversion functionality
  • Context menu integration
  • Real-time conversion logging
  • Automatic request modification

Known Issues

  • Currently supports IPv4 addresses only
  • Large requests may experience slight processing delays

Upcoming Features

  • IPv6 support
  • Batch conversion capability
  • Custom conversion rules
  • Configuration interface
  • Enhanced logging options

Security Considerations

This tool is intended for authorized security testing only. Users should:

  • Obtain proper authorization before testing
  • Follow responsible disclosure practices
  • Use in compliance with applicable laws and regulations

Support

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments

Special thanks to:

  • The Hacker Associate Team
  • The security testing community
  • All contributors and testers

Note: This tool is for professional security testing purposes only. Always ensure you have proper authorization before conducting security tests.