Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/websecnl/MagicByteSelector
Burp Suite Extension for inserting a magic byte into responder's request
https://github.com/websecnl/MagicByteSelector
Last synced: 2 months ago
JSON representation
Burp Suite Extension for inserting a magic byte into responder's request
- Host: GitHub
- URL: https://github.com/websecnl/MagicByteSelector
- Owner: websecnl
- Created: 2023-09-10T14:29:47.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-09-22T13:18:56.000Z (over 1 year ago)
- Last Synced: 2024-08-04T00:04:33.838Z (6 months ago)
- Language: Python
- Homepage:
- Size: 617 KB
- Stars: 20
- Watchers: 2
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-burp-extensions - MagicByteSelector - Burp Suite Extension for inserting a magic byte into responder's request (Custom Features)
README
# MagicByteSelector
Burp Suite Extension for inserting a magic byte into responder's request
# Preview
# What this does
Some web applications use a security feature for their file upload checks which validates the first bytes of the sent data also known as Magic Byte which
allows for the identification of the file type, for instance 'GIF87a' corresponds to a file with .GIF file extension.
Now lets say you try to upload ``` ``` the web application will throw an error saying that it wont accept the file
However if you make it ``` GIF87a ``` in some cases the web application will think its a GIF and will allow the file to be uploaded!
This extension will allow you to insert these Magic Bytes straight from burp suite into your request.
# Like this extension?
If you like this extension than you can show your support by giving us a Google Review
and/or giving a Star to this project here on Github
Google: https://g.page/r/CVTFTdnvWiKzEB0/review
Trustpilot: https://www.trustpilot.com/review/websec.nl
Thank you!
# Ideas, Suggestions or Bug Reports?
You can go to our website and submit the contact form: [websec](https://websec.nl)
If as a result of your contribution we will improve the code then we will make sure to mention your name as a contributor :)