Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/directdefense/noncetracker
https://github.com/directdefense/noncetracker
Last synced: 28 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/directdefense/noncetracker
- Owner: DirectDefense
- Created: 2020-02-25T21:18:11.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2020-02-25T21:18:22.000Z (over 4 years ago)
- Last Synced: 2024-02-09T20:13:18.773Z (4 months ago)
- Language: Java
- Size: 2.93 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Lists
- awesome-burp-suite - **3**星
- awesome-burp-suite - **3**星
README
Nonce Tracker
BurpExtender.java
ABlakemore
http://www.directdefense.comIntroduction
============A Burp extender module that tracks and updates nonce values per a specific application action.
Usage
=====- Download the latest Burp API package from http://portswigger.net/burp/extender/
- Modify regexes to match your particular nonce location and name.
- Don't forget to change split and replace regexes
- If you do not need to deal with directory rewriting, modify or remove rqPage
- Compile Jar (http://blog.portswigger.net/2009/04/using-burp-extender.html)
- Load Jar into Burp Extender
- You can always at some output to ensure your code is working or daisy chain proxies to verify rewrite is working.
- Start Testing
COPYRIGHT
=========BurpExtender.java
Created by A. Blakemore
Copyright (C) 2013 DirectDefense, Inc.
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see