Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/Leoid/MatchandReplace

Match and Replace script used to automatically generate JSON option file to BurpSuite
https://github.com/Leoid/MatchandReplace

Last synced: 10 days ago
JSON representation

Match and Replace script used to automatically generate JSON option file to BurpSuite

Awesome Lists containing this project

README

        


drawing



Match and Replace Script for BurpSuite








### Main Features
* Generate Match and Replace options from a file
* Create presets for your attack
* Output to a JSON file

### Usage
``` usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT] ```

### Optional Arguments:
* -h, --help show this help message and exit
* -f FILE, --file FILE Parameters/Variables to be Matched
* -c COMMENT, --comment COMMENT
Comment or Bug Class [SSRF, RCE, XSS ..etc]
* -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
* -s REPLACE, --replace REPLACE
Literal String to Replace
* -x, --tmp replace with regex and add a temp var
* -o OUTPUT, --output OUTPUT
Option JSON file

### Examples
##### Removing Headers/Parameters
* ``` ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json ```
##### Adding Headers/Parameters
* ``` ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json ```
##### Replacing Headers/Parameters
* You might use the argument -x to use the Regex Match and Replace option
* ``` ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json ```

## Contribution, Credits & License
### Ways to contribute

* Suggest a feature
* Report a bug
* Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.