search

RhinoSecurityLabs / IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
814 stars 144 forks source link

AWS China problem using your extension #43

Closed sarkan902 closed 9 months ago

sarkan902 commented 2 years ago

Hello i tried to edit IPRotate Extension by changing line self.allEndpoints.append(self.restAPIId + '.execute-api.' + region + '.amazonaws.com') to .com.cn so i can access Chinese API Gateway.

I have chinese Amazon account and i opened regions cn-north-1 and cn-northwest-1. When i tried to make any request then it's giving me 403 code error on request and body is {"Message":null}

Please help me :( image

I want to add that i tried to make it from API Gateway Panel and it works, but only on amazon panel image

DaveYesland commented 2 years ago

All you should need to do to modify or add regions is add to the list at: https://github.com/RhinoSecurityLabs/IPRotate_Burp_Extension/blob/d561b5f18d8c64cc02e56d7c830e4126f36a6bab/IPRotate.py#L16

See if just doing that helps. I am not sure regarding the 403.

sarkan902 commented 2 years ago

https://www.toptal.com/developers/hastebin/aluninatim.rb

That's code of your extension edited by me, please check it out I think problem is somewhere in function processHttpMessage

Yes brother i'm talking about https://amazonaws.cn , not amazonaws.com. They are 2 seperate amazons AWS. But yeah they should work same way. I was shocked that extension dont want work on it like it should.

Here's output from CloudWatch logs image

Also found interesting thing (i think related to it) image

DaveYesland commented 9 months ago

I have no way to test AWS China, feel free to fork and work on this for now China region support will not be added to this project.