{"id":13389829,"url":"https://github.com/TheKingOfDuck/burpFakeIP","last_synced_at":"2025-03-13T14:31:59.590Z","repository":{"id":38206144,"uuid":"190346425","full_name":"TheKingOfDuck/burpFakeIP","owner":"TheKingOfDuck","description":"服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件","archived":false,"fork":false,"pushed_at":"2022-09-29T09:12:24.000Z","size":1298,"stargazers_count":1525,"open_issues_count":0,"forks_count":233,"subscribers_count":15,"default_branch":"master","last_synced_at":"2025-03-11T09:11:24.541Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TheKingOfDuck.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-06-05T07:24:35.000Z","updated_at":"2025-03-10T18:01:30.000Z","dependencies_parsed_at":"2023-01-17T17:49:21.569Z","dependency_job_id":null,"html_url":"https://github.com/TheKingOfDuck/burpFakeIP","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheKingOfDuck%2FburpFakeIP","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheKingOfDuck%2FburpFakeIP/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheKingOfDuck%2FburpFakeIP/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheKingOfDuck%2FburpFakeIP/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TheKingOfDuck","download_url":"https://codeload.github.com/TheKingOfDuck/burpFakeIP/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243422610,"owners_count":20288490,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-30T13:01:34.666Z","updated_at":"2025-03-13T14:31:59.507Z","avatar_url":"https://github.com/TheKingOfDuck.png","language":"Java","funding_links":[],"categories":["Python","Java","Python (1887)"],"sub_categories":[],"readme":"## burpFakeIP\n\n下载使用：[Releases](https://github.com/TheKingOfDuck/burpFakeIP/releases/tag/1.0)\n\n**2021/09/24**\n\n1. 修复[M00nBack](https://github.com/M00nBack)反馈的一个bug。\n2. 添加了AutoXFF的开关,并将AutoXFF默认设置不开启,如需让插件给每个请求头添加一个随机的XFF请求头可在右键菜单中选择ON开启\n\n\n**2021/05/21**\n\n使用Java重构，增加了[issue](https://github.com/TheKingOfDuck/burpFakeIP/issues/8)中提到的功能特性，新增给每个请求自动添加XFF头以及随机IP的功能，具体可见右键菜单AutoXFF,默认情况下自动添加的xff头为X-Forwarded-For,值为生成的随机IP,均可自定义。\n\n**2020/04/25**\n\n优化代码，新增9种请求头。\n\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597179485863.png)\n\n\n\n四个小功能\n\n* 伪造指定ip\n* 伪造本地ip\n* 伪造随机ip\n* 随机ip爆破\n\n### 0x01 伪造指定ip\n\n在`Repeater`模块右键选择`fakeIp`菜单,然后点击`inputIP`功能,然后输入指定的ip：\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597184839805.png)\n\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597185444300.png)\n\n程序会自动添加所有可伪造得字段到请求头中。\n\n### 0x02 伪造本地ip\n\n在`Repeater`模块右键选择`fakeIp`菜单,然后点击`127.0.0.1`功能：\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597186627939.png)\n\n### 0x03 伪造随机ip\n\n在`Repeater`模块右键选择`fakeIp`菜单,然后点击`randomIP`功能：\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597187304576.png)\n\n\n### 0x04 随机ip爆破\n\n**伪造随机ip爆破是本插件最核心的功能。**\n\n将数据包发送到`Intruder`模块,在`Positions`中切换`Attack type`为`Pitchfork`模式,选择好有效的伪造字段,以及需要爆破的字段:\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597190596991.png)\n\n按照箭头顺序将Payload来源设置为`Extensin-generated`,并设置负载伪`fakeIpPayloads`,然后设置第二个变量。\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597191239161.png)\n\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597192426317.png)\n\n点击`Start attack`开始爆破.\n\n![](https://github.com/TheKingOfDuck/BurpFakeIP/blob/master/images/15597193222287.png)\n\n如上图,实现每次爆破都使用不同的伪ip进行,避免被ban。\n\n\u003e PS：伪造随机ip爆破的先决条件可以伪造ip绕过服务器限制。\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTheKingOfDuck%2FburpFakeIP","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FTheKingOfDuck%2FburpFakeIP","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTheKingOfDuck%2FburpFakeIP/lists"}