hacktricks/burp-suite.md
carlospolop 1fa9f77ec3 change
2023-04-05 14:02:54 +02:00

3.8 KiB

HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥

Basic Payloads

  • Simple List: Just a list containing an entry in each line
  • Runtime File: A list read in runtime (not loaded in memory). For supporting big lists.
  • Case Modification: Apply some changes to a list of strings(No change, to lower, to UPPER, to Proper name - First capitalized and the rest to lower-, to Proper Name -First capitalized an the rest remains the same-.
  • Numbers: Generate numbers from X to Y using Z step or randomly.
  • Brute Forcer: Character set, min & max length.

https://github.com/0xC01DF00D/Collabfiltrator : Payload to execute commands and grab the output via DNS requests to burpcollab.

{% embed url="https://medium.com/@ArtsSEC/burp-suite-exporter-462531be24e" %}

https://github.com/h3xstream/http-script-generator

HackTricks in 🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥