Automating Multi-Step Workflows with the Burp Extension Stepper

Поделиться
HTML-код
  • Опубликовано: 11 сен 2024

Комментарии • 11

  • @Ryan_Armstrong
    @Ryan_Armstrong  9 месяцев назад +3

    Sorry for the blocked view of the regex. Here are the patterns used.
    The naive/incorrect pattern: value="[a-zA-Z0-9]*"
    The correct pattern using look around assertions: (?

  • @bughunter021
    @bughunter021 Месяц назад +1

    Very useful bro .tnx a lot

  • @senlin9414
    @senlin9414 6 месяцев назад

    Great, thank you

  • @7he7hief95
    @7he7hief95 8 месяцев назад

    Can stepper also be used with turbo intruder? Have you tried this yet? By the way, really useful videos you made. Thx

    • @Ryan_Armstrong
      @Ryan_Armstrong  8 месяцев назад

      I have not tried this, BUT I believe it will work with the right setup. Stepper is integrated with Burp's standard HTTP engine, but Turbo Intruder by default uses a custom engine. If you configure your Turbo Intruder attack to use a Burp engine, I suspect that it will work with Stepper. If you give it a try, please let me know if it works. Maybe I will add another video! I'm glad you find the vids useful; thanks for the feedback!

  • @user-dx1eq3vf5b
    @user-dx1eq3vf5b 9 месяцев назад

    Setting the resource pool to 1 makes it run very slowly. Is there any way to improve this? Can Turbo Intruder be used?

    • @Ryan_Armstrong
      @Ryan_Armstrong  9 месяцев назад

      Actually, I don't recall encountering this issue in the past and figured out the solution live here. I am going to investigate the next time I need this feature. Turbo Intruder will probably work if you use the BURP engine, but it probably has the same issue with concurrent requests.

  • @user-dx1eq3vf5b
    @user-dx1eq3vf5b 9 месяцев назад +1

    The bottom right corner is blocked by your avatar.

    • @0xbitbybit
      @0xbitbybit 9 месяцев назад

      Yeah this, might want to proof-watch your videos before uploading, can't see any of the regex stuff you do in the bottom right.

    • @Ryan_Armstrong
      @Ryan_Armstrong  9 месяцев назад

      @@0xbitbybit Sorry, I added a comment with the patterns. Thanks for letting me know - will correct next time, but I do not have the time to proof watch.