search

PortSwigger / distribute-damage

Evenly distributes scanner load across targets
Other
82 stars 9 forks source link

Feature request: Pausing all traffic on pattern match #2

Open Hipapheralkus opened 2 years ago

Hipapheralkus commented 2 years ago

Would it be possible to add a static text, or regexp which, if occurs in the HTTP response would instruct Distribute Damage extension to Pause all traffic automatically?

Usecase: if there is a known string which indicates completely broken environment, or out of session for complex session management, this extension would pause all the traffic until problems are resolved and pentester unchecks the "pause all traffic" button. That would be an amazing help!

albinowax commented 2 years ago

This is a good use-case but non-trivial to implement. It might be better as a feature request for core burp - you could set a trigger that paused task execution on the dashboard.

albinowax commented 2 years ago

That said, you could try spiking it in here and see how it goes: https://github.com/PortSwigger/distribute-damage/blob/master/src/burp/Throttler.java#L15