Sorry for the blocked view of the regex. Here are the patterns used. The naive/incorrect pattern: value="[a-zA-Z0-9]*" The correct pattern using look around assertions: (?
I have not tried this, BUT I believe it will work with the right setup. Stepper is integrated with Burp's standard HTTP engine, but Turbo Intruder by default uses a custom engine. If you configure your Turbo Intruder attack to use a Burp engine, I suspect that it will work with Stepper. If you give it a try, please let me know if it works. Maybe I will add another video! I'm glad you find the vids useful; thanks for the feedback!
Actually, I don't recall encountering this issue in the past and figured out the solution live here. I am going to investigate the next time I need this feature. Turbo Intruder will probably work if you use the BURP engine, but it probably has the same issue with concurrent requests.
@@0xbitbybit Sorry, I added a comment with the patterns. Thanks for letting me know - will correct next time, but I do not have the time to proof watch.
Sorry for the blocked view of the regex. Here are the patterns used.
The naive/incorrect pattern: value="[a-zA-Z0-9]*"
The correct pattern using look around assertions: (?
Very useful bro .tnx a lot
Glad to hear, cheers!
Great, thank you
Can stepper also be used with turbo intruder? Have you tried this yet? By the way, really useful videos you made. Thx
I have not tried this, BUT I believe it will work with the right setup. Stepper is integrated with Burp's standard HTTP engine, but Turbo Intruder by default uses a custom engine. If you configure your Turbo Intruder attack to use a Burp engine, I suspect that it will work with Stepper. If you give it a try, please let me know if it works. Maybe I will add another video! I'm glad you find the vids useful; thanks for the feedback!
Setting the resource pool to 1 makes it run very slowly. Is there any way to improve this? Can Turbo Intruder be used?
Actually, I don't recall encountering this issue in the past and figured out the solution live here. I am going to investigate the next time I need this feature. Turbo Intruder will probably work if you use the BURP engine, but it probably has the same issue with concurrent requests.
The bottom right corner is blocked by your avatar.
Yeah this, might want to proof-watch your videos before uploading, can't see any of the regex stuff you do in the bottom right.
@@0xbitbybit Sorry, I added a comment with the patterns. Thanks for letting me know - will correct next time, but I do not have the time to proof watch.