sf

ZIP File Raider is a Burp Suite extension for attacking spider web application amongst ZIP file upload functionality. You tin easily inject Burp Scanner/Repeater payloads inwards ZIP content of the HTTP requests which is non viable yesteryear default. This extension helps to automate the extraction in addition to compression steps. This software was created yesteryear Natsasit Jirathammanuwat during a cooperative pedagogy course of instruction at King Mongkut's University of Technology Thonburi (KMUTT). Installation Set upward Jython standalone Jar inwards Extender > Options > Python Environment > "Select file...". Add ZIP File Raider extension inwards Extender > Extensions > Add > CompressedPayloads.py (Extension type: Python) How to use Send the HTTP asking amongst a compressed file to the ZIP File Raider First, correct click on the HTTP asking amongst a compressed file inwards HTTP trunk in addition to and therefore direct "Sen...

H5N1 Burp Suite extension to help inward detecting as well as exploiting serialisation libraries/APIs. This useful extension was originally developed yesteryear Nick Bloor (@nickstadb) for NCC Group as well as is mainly based on the piece of job of Alvaro Muñoz as well as Oleksandr Mirosh, Friday the 13th: JSON Attacks , which they presented at Black Hat USA 2017 as well as DEF CON 25. In their piece of job they reviewed a attain of JSON as well as XML serialisation libraries for Java as well as .NET as well as constitute that many of them back upwards serialisation of arbitrary runtime objects as well as equally a lawsuit are vulnerable inward the same agency equally many serialisation technologies are - snippets of code (POP gadgets) that execute during or presently later deserialisation tin hold out controlled using the properties of the serialized objects, oft opening upwards the potential for arbitrary code or command execution. Further modules supporting to a greater ext...