Skip to content

lewerkun/MatchandReplace

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

drawing


Match and Replace Script for BurpSuite

Main Features

  • Generate Match and Replace options from a file
  • Create presets for your attack
  • Output to a JSON file

Usage

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

Optional Arguments:

  • -h, --help show this help message and exit
  • -f FILE, --file FILE Parameters/Variables to be Matched
  • -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
  • -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
  • -s REPLACE, --replace REPLACE Literal String to Replace
  • -x, --tmp replace with regex and add a temp var
  • -o OUTPUT, --output OUTPUT Option JSON file

Examples

Removing Headers/Parameters
  • ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json
Adding Headers/Parameters
  • ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json
Replacing Headers/Parameters
  • You might use the argument -x to use the Regex Match and Replace option
  • ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

Contribution, Credits & License

Ways to contribute

  • Suggest a feature
  • Report a bug
  • Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.

About

Match and Replace script used to automatically generate JSON option file to BurpSuite

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages

  • Python 100.0%