{"id":13801608,"url":"https://github.com/Redguard/Sheet-Intruder","last_synced_at":"2025-05-13T11:31:26.173Z","repository":{"id":228553022,"uuid":"710390618","full_name":"Redguard/Sheet-Intruder","owner":"Redguard","description":"Enables transparent use of Excel files in Burp Suite","archived":false,"fork":false,"pushed_at":"2024-03-19T10:30:54.000Z","size":95,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-11-18T16:57:37.689Z","etag":null,"topics":["burp-extensions","burp-plugin","burpsuite","excel","montoya-api","penetration-testing"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Redguard.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-10-26T15:43:41.000Z","updated_at":"2023-12-20T17:37:00.000Z","dependencies_parsed_at":null,"dependency_job_id":"2fa3b8bd-1ffe-4043-84f6-36be44a0870e","html_url":"https://github.com/Redguard/Sheet-Intruder","commit_stats":null,"previous_names":["redguard/sheet-intruder"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Redguard%2FSheet-Intruder","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Redguard%2FSheet-Intruder/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Redguard%2FSheet-Intruder/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Redguard%2FSheet-Intruder/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Redguard","download_url":"https://codeload.github.com/Redguard/Sheet-Intruder/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253932889,"owners_count":21986473,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["burp-extensions","burp-plugin","burpsuite","excel","montoya-api","penetration-testing"],"created_at":"2024-08-04T00:01:24.908Z","updated_at":"2025-05-13T11:31:25.644Z","avatar_url":"https://github.com/Redguard.png","language":"Java","funding_links":[],"categories":["Payload Generators and Fuzzers"],"sub_categories":["SSRF"],"readme":"# Sheet Intruder\n```\n⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡤⠐⠢⠀⠀⠀⠀⠀⠀\n⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡠⠉⠀⠀⠀⠱⠀⠀⠀⠀⠀\n⠀⠀⠀⣀⣀⣤⣤⣤⣶⣶⣿⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣮⣑⠡⡀⡀⠀⢀⡇⠀⠀⠀⠀\n⢰⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⢰⣶⣶⣶⣶⣶⣶⣶⣶⣶⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣿⣄⠈⣌⠪⡄⢰⢡⠀⠀⠀⠀\n⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠈⠉⠉⣿⣿⡟⠉⠉⣿⣿⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⢿⣾⣀⠈⢂⠃⡈⠘⣄⠀⠀⠀\n⢸⣿⣿⣏⠉⠙⣿⣿⠉⠉⣿⣿⣿⠀⠀⢠⣤⣤⣿⣿⣧⣤⣤⣿⣿⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢘⣿⣷⣄⠤⢢⠁⡠⠂⠢⡀⠀\n⢸⣿⣿⣿⣆⠀⠸⠃⢀⣾⣿⣿⣿⠀⠀⠸⠿⠿⣿⣿⡿⠿⠿⣿⣿⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢰⠏⣸⡿⠟⣾⠓⠉⡖⠀⠀⠈⢂\n⢸⣿⣿⣿⣿⠆⠀⠀⢾⣿⣿⣿⣿⠀⠀⠀⠀⠀⣿⣿⡇⠀⠀⣿⣿⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣆⡏⢸⠟⠀⣾⠀⠈⢡⡠⠂⠀⠈\n⢸⣿⣿⣿⠏⠀⣰⡄⠀⢿⣿⣿⣿⠀⠀⢰⣶⣶⣿⣿⣷⣶⣶⣿⣿⡇⠀⠀⠀⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡼⡀⡇⢈⠐⠠⡟⠀⠀⢞⡿⢅⠄⢀\n⢸⣿⣿⣃⣀⣰⣿⣷⣀⣀⣻⣿⣿⠀⠀⠘⠛⠛⣿⣿⡟⠛⠛⣿⣿⡇⠀⠀⠀⠹⣿⣷⣦⡀⠀⠀⠀⠀⠀⠀⠀⠀⢀⠜⠊⢛⡃⠘⠀⠀⡇⠀⡈⠶⠄⠒⠂⡔\n⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⢀⣀⣀⣿⣿⣧⣀⣀⣿⣿⡇⠀⠀⠀⠀⠘⣿⣿⣿⣷⣄⣀⠀⠤⡠⡤⠒⠫⠱⠀⣼⠧⠀⠀⠀⢁⠠⢱⠤⠒⠒⣠⠇\n⠸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠸⠿⠿⠿⠿⠿⠿⠿⠿⠿⠃⠀⠀⠀⠀⠀⠘⢿⣿⣿⣿⣾⡷⡋⣞⠔⡣⠎⠙⠂⠘⠒⠲⡖⡒⠒⡶⢙⠀⠈⠉⣸⠀\n⠀⠀⠀⠉⠉⠛⠛⠛⠿⠿⣿⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠻⣿⣿⡿⣿⣿⣯⠪⡖⠤⠤⠔⣀⣤⡃⠀⠀⡁⠀⣀⠄⠊⡜⠀\n⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠛⢿⡌⠙⢿⣾⡫⠅⠂⠉⠀⠀⠁⠪⢁⠈⠉⠀⠀⣸⠀⠀\n⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⠚⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠉⠀⠀\n```\n\n\n_Make Excel Fuzzing Simpler_\n\n## Introduction\n\nSheet Intruder is a Burp Suite extension designed to simplify the process of fuzzing for Excel file uploads.\nIt works by representing the content of an Excel file as a tag, which can then be integrated into various locations.\nThis tag then allows configuration such as replacements for fuzzing targets.\n\n## Features\n\n- Seamless Integration: Sheet Intruder seamlessly integrates into Burp Suite's Intruder, Scanner, and Repeater tools,\n  allowing for efficient and comprehensive Excel file manipulation during different stages of testing.\n\n- Both .xls and .xlsx file formats are supported\n\n- Value Replacement Mode: Use the `\u003c$SheetIntruder\u003e` tag to define value replacements within the Excel file. This\n  mode allows you to search for specific values within cells and replace them with desired substitutions.\n\n- Cell Replacement Mode: Use the `\u003c$SheetIntruderCell\u003e` tag to perform cell-based replacements. You can replace cells\n  either by referencing their cell number (e.g., \"A1\", \"B1\") or by specifying cell ranges (e.g., \"A1:B12\", \"CustomSheet!\n  A1:D5\").\n\n## Workflow\n\n1. Choose your Excel file (.xls and .xlsx supported)\n2. The selected file is loaded into the extension\n3. In Repeater, Proxy, Scanner or Intruder you are now able to include the tags described below\n4. Before sending the request the provided Excel file is read and the requested modifications made\n\n### Value Replacement Mode Tag\nThis mode searches for specific values within cells and replaces them with the desired substitutions in the Excel file.\n\n```\n\u003c$SheetIntruder\u003e\n{\n    \"valueToReplace\": \"replacement\",\n    \"valueToReplace2\": \"replacement2\"\n}\n\u003c/$SheetIntruder\u003e\n```\n\n\n### Cell Replacement Mode Tag\nThis mode replaces cells referenced by their cell number with the given substitution.\nExamples:\n\n```\n\u003c$SheetIntruderCell\u003e\n{\n   \"A1\": \"replacement\",\n   \"B1\": \"replacement2\"\n}\n\u003c/$SheetIntruderCell\u003e\n\n\u003c$SheetIntruderCell\u003e\n{\n   \"A1\": \"replacement\",\n   \"CustomSheet!B21\": \"otherSheetB21\"\n}\n\u003c/$SheetIntruderCell\u003e\n\n\u003c$SheetIntruderCell\u003e\n{\n   \"A1:B12\": \"rangeReplacement\",\n   \"CustomSheet!A1:D5\": \"otherSheetRange\"\n}\n\u003c/$SheetIntruderCell\u003e\n\n```\n\n--- \n\n### Building from source\n```\n$ gradle build shadowJar\n```\n\n### Testing\nA test server is provided and can be built using the docker file. It's only purpose is to simulate a file upload,\nand store the uploaded files for diagnostics.\n```bash\n$ docker build -t sheetintruder-testserver:latest .\n$ docker run -p 5000:5000 -v $(pwd):/output sheetintruder-testserver\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FRedguard%2FSheet-Intruder","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FRedguard%2FSheet-Intruder","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FRedguard%2FSheet-Intruder/lists"}