Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save GangGreenTemperTatum/1b1893326db9b1e5af49d25746e3c3da to your computer and use it in GitHub Desktop.

Select an option

Save GangGreenTemperTatum/1b1893326db9b1e5af49d25746e3c3da to your computer and use it in GitHub Desktop.
Custom action in Burp Suite that automatically sends a payload to all parameters in a request at once. This helps run basic checks automatically for every request sent through Repeater. You can customize it with your own payloads and create multiple actions as needed, a real timesaver.
// custom action in Burp Suite that automatically sends a payload to all parameters in a request at once. This helps run basic checks automatically for every request sent through Repeater. You can customize it with your own payloads and create multiple actions as needed, a real timesaver.
var injReq = original.parameters().stream().reduce(
original,
(req, param) -> req.withUpdatedParameters(
HttpParameter.parameter(
param.name(),
param.value() + "'AND'1'='1",
param.type()
)
),
(r1, r2) -> r2
);
var result = api().http().sendRequest(injReq);
var resp = result.response();
if (resp != null) {
int status = resp.statusCode();
int contentLength = resp.toByteArray().length();
logging().logToOutput(
String.format("Status: %d, CL: %d", status, contentLength)
);
} else {
logging().logToOutput("No response");
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment