https://github.com/WithSecureLabs/FixerUpper

A Burp extension to enable modification of FIX messages when relayed from MitM_Relay
https://github.com/WithSecureLabs/FixerUpper

Last synced: 2 months ago
JSON representation

A Burp extension to enable modification of FIX messages when relayed from MitM_Relay

• Host: GitHub
• URL: https://github.com/WithSecureLabs/FixerUpper
• Owner: WithSecureLabs
• License: bsd-3-clause
• Created: 2021-11-22T16:33:00.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2023-02-10T16:28:10.000Z (almost 2 years ago)
• Last Synced: 2024-05-19T04:56:46.948Z (8 months ago)
• Language: Python
• Size: 103 KB
• Stars: 11
• Watchers: 3
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-burp-extensions - FixerUpper - A Burp extension to enable modification of FIX messages when relayed from MitM_Relay (Misc / SSRF)

README

        
# FixerUpper v0.1

A Burp extension to enable modification of FIX messages when relayed from MitM_Relay

# Blog post:

https://labs.withsecure.com/publications/a-bit-of-a-fixer-upper-testing-fix-backed-applications

# Installation

Can be manually installed by cloning this repository and then from within Burp Suite:

1. selecting the Extender tab

2. clicking the Add button

3. changing the Extension type to Python

4. selecting fixerupper.py as the extension file.

### Note

The extension requires Burp Suite to be configured to use Jython. For installation please see:

https://portswigger.net/burp/help/extender.html#options_pythonenv

FixerUpper is designed and intended to help with interception and modification of the TCP-based FIX protocol. As such, it is expected to be used with a TCP relay tool like MitM_Relay.py:

https://github.com/jrmdev/mitm_relay

# Basic Usage

After adding the extension you can define regular expressions for required HTTP headers, as well as the request body structure:

![FixerUpper Config](images/config_01.png)

With this done, you will then get a "Fixer Upper" tab in the request window: 

![FixerUpper Config](images/preview_01.png)