https://github.com/pentestpartners/fista

A Burp Extender plugin allowing decoding of fastinfoset encoded communications.
https://github.com/pentestpartners/fista

Last synced: 28 days ago
JSON representation

A Burp Extender plugin allowing decoding of fastinfoset encoded communications.

• Host: GitHub
• URL: https://github.com/pentestpartners/fista
• Owner: pentestpartners
• License: mit
• Created: 2017-09-29T10:24:13.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2017-10-02T12:59:24.000Z (over 6 years ago)
• Last Synced: 2024-03-16T03:41:43.800Z (3 months ago)
• Language: Java
• Homepage:
• Size: 22.5 KB
• Stars: 4
• Watchers: 4
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome-burp-suite - **4**星
• awesome-burp-suite - **4**星

README

        
# FastInfoSet Translator and Attacker (fista)

This decodes fastinfoset encoded requests from client -> burp so they can be read/scanned/intruded etc, then encodes 

the requests again from burp -> server.

Similarly but in reverse for responses.

If the requests are gzip compressed, they will be decompressed first and re-compressed afterwards.

## Usage

The original encoded requests are visible in the proxy under the _Original request_ tab, but a new _Edited request_ tab 

shows the decoded content. This can then be sent to intruder/scanned etc which should then encode them on the fly but 

only show decoded requests/responses.

Similarly the _Original response_ tab is the decoded response, and the _Edited response_ tab the encoded response. 

These tab names are perhaps backwards but cannot be changed.

## Building

This project requires apache maven to build.

```

$ cd fista

$ mvn package

```

Open Burp Suite, switch to "Extender" tab, add the jar in the target folders as an extension.

Alternatively you can use the precompiled jar in this repository. 

## Contributing

Pull requests are welcome.