https://github.com/n0kovo/burp-copy-headers-as-args

Copy request headers in -H format (cURL, Wfuzz, Gobuster etc.)
https://github.com/n0kovo/burp-copy-headers-as-args

Last synced: 3 months ago
JSON representation

Copy request headers in -H format (cURL, Wfuzz, Gobuster etc.)

• Host: GitHub
• URL: https://github.com/n0kovo/burp-copy-headers-as-args
• Owner: n0kovo
• License: gpl-3.0
• Created: 2023-02-17T21:22:46.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-02-19T12:23:19.000Z (over 1 year ago)
• Last Synced: 2024-04-27T06:35:19.749Z (6 months ago)
• Language: Python
• Size: 28.3 KB
• Stars: 5
• Watchers: 1
• Forks: 1
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-burp-extensions - Copy Headers As -H Arguments - The "Copy Headers As -H Arguments" Burp Suite extension adds a new context menu entry that will copy the headers from the selected request to the clipboard in various formats (Misc / SSRF)

README

        
# Burp Extension: Copy Headers As -H Arguments

## Description

The "Copy Headers As -H Arguments" Burp Suite extension adds a new context menu entry that will copy the headers from the selected request to the clipboard, in the following format:

```-H "Host:example.com" -H "Cache-Control:max-age=0" -H "Upgrade-Insecure-Requests:1" -H "User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" -H "Sec-Gpc:1" -H "Sec-Fetch-Site:none" -H "Sec-Fetch-Mode:navigate" -H "Sec-Fetch-User:?1" -H "Sec-Fetch-Dest:document" -H "Connection:close"```

This string can then be pasted as part of a command with tools using this syntax.

**Known supported tools:**

- cURL

- Gobuster

- Feroxbuster *

- sqlmap

- Wfuzz

- ffuf

## Known Issues

- *Feroxbuster doesn't like `Accept` or `Accept-Language` headers for some reason, so they're not included in the copied output.

- *Feroxbuster will only accept the `User-Agent` header using `-a,` / `--user-agent`, so for now, personally, I'm just manually changing that `-H` to `-a` and removing the header name. I'll probably make some more options at some point that will make this easier.

## TODO:

- Make submenu with different formats like "--headers", "Without User-Agent" etc.

## Author

- n0kovo (GitHub: [n0kovo](https://github.com/n0kovo), Mastodon: [@[email protected]](https://infosec.exchange/@n0kovo))