search

RhinoSecurityLabs / IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
807 stars 144 forks source link

{"message":"Missing Authentication Token"} #5

Closed m3Ik0r closed 5 years ago

m3Ik0r commented 5 years ago

After successfully adding the extension to burp, and adding my access/secret keys for a user with appropriate api gateway permissions, when browsing to the target I chose I always get the following message:

"{"message":"Missing Authentication Token"}"

Frichetten commented 5 years ago

@theyellowking1603, how did you resolve this?

m3Ik0r commented 5 years ago

@Frichetten I realised that it was because I was browsing directly to the target I set, e.g:

www.google.com

But if you browse to www.google.com/whatever?etc=sdfsdfsd it works fine.

DaveYesland commented 5 years ago

Yes this is an issue I have noticed. Attempting to access the root of a target domain fails through API Gateway with this error. I am going to look into trying to fix this at some point.

Frichetten commented 5 years ago

@theyellowking1603, Thank you! I noticed this last week but forgot about it completely. You have saved me like an hour of fiddling around.

@DaveYesland, thank you for making the tool! I'm really enjoying using it.

ThunderSon commented 5 years ago

After a day of researching the issue, I arrived to the issues section and found this. Thank you for clearing this up. I'll try and see if I can help on this issue 😄

ThunderSon commented 5 years ago

After doing some research, the code needs to add an ANY Method to the /, just like it did for the /{proxy+} endpoint. Testing it out right now, and will see if I can create a small code snippet and create a PR

ThunderSon commented 5 years ago

Assign this to me when possible 😄

DaveYesland commented 5 years ago

Thanks!