Match and Replace Script for BurpSuite

Main Features

• Generate Match and Replace options from a file
• Create presets for your attack
• Output to a JSON file

Usage

usage: generate.py [-h] [-f FILE] [-c COMMENT] [-r RULE] [-s REPLACE] [-o OUTPUT]

Optional Arguments:

• -h, --help show this help message and exit
• -f FILE, --file FILE Parameters/Variables to be Matched
• -c COMMENT, --comment COMMENT Comment or Bug Class [SSRF, RCE, XSS ..etc]
• -r RULE, --rule RULE Rule Type [request_header,request_body ...etc]
• -s REPLACE, --replace REPLACE Literal String to Replace
• -x, --tmp replace with regex and add a temp var
• -o OUTPUT, --output OUTPUT Option JSON file

Examples

Removing Headers/Parameters

• ./generate.py -f replaced_headers.txt -c "Removing Headers" --rule "request_header" --replace "" --output remove.json

  Adding Headers/Parameters

• ./generate.py -f added_headers.txt -c "Adding Headers" --rule "request_header" --replace "X-XSS-Protection: 0" --output adding.json

  Replacing Headers/Parameters

• You might use the argument -x to use the Regex Match and Replace option
• ./generate.py -f parameters.txt -c "SSRF Matching" --rule "request_param_name" --replace "attacker.com:port" -x --output opt.json

Contribution, Credits & License

Ways to contribute

• Suggest a feature
• Report a bug
• Fixing Issues

Licensed under the GNU GPLv3, see LICENSE for more information.