Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/Leoid/MatchandReplace
Match and Replace script used to automatically generate JSON option file to BurpSuite
https://github.com/Leoid/MatchandReplace
Last synced: about 2 months ago
JSON representation
Match and Replace script used to automatically generate JSON option file to BurpSuite
- Host: GitHub
- URL: https://github.com/Leoid/MatchandReplace
- Owner: Leoid
- License: gpl-3.0
- Created: 2019-05-12T06:15:19.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2019-05-13T13:04:32.000Z (over 5 years ago)
- Last Synced: 2024-07-31T14:18:40.922Z (4 months ago)
- Language: Python
- Size: 429 KB
- Stars: 212
- Watchers: 5
- Forks: 51
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - Leoid/MatchandReplace - Match and Replace script used to automatically generate JSON option file to BurpSuite (Python)
README
Match and Replace Script for BurpSuite
### Main Features
* Generate Match and Replace options from a file
* Create presets for your attack
* Output to a JSON file### Usage
``` usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT] ```### Optional Arguments:
* -h, --help show this help message and exit
* -f FILE, --file FILE Parameters/Variables to be Matched
* -c COMMENT, --comment COMMENT
Comment or Bug Class [SSRF, RCE, XSS ..etc]
* -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
* -s REPLACE, --replace REPLACE
Literal String to Replace
* -x, --tmp replace with regex and add a temp var
* -o OUTPUT, --output OUTPUT
Option JSON file### Examples
##### Removing Headers/Parameters
* ``` ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json ```
##### Adding Headers/Parameters
* ``` ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json ```
##### Replacing Headers/Parameters
* You might use the argument -x to use the Regex Match and Replace option
* ``` ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json ```## Contribution, Credits & License
### Ways to contribute* Suggest a feature
* Report a bug
* Fixing IssuesLicensed under the GNU GPLv3, see LICENSE for more information.