RhinoSecurityLabs / IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
807 stars 144 forks source link

Issues Rotating Through Multiple Regions #54

Closed jas594 closed 8 months ago

jas594 commented 8 months ago

I never had this bug in the past, but it seems there's now a problem when using a gateway in more than 1 region. Specifically, only every other request gets routed and hits the receiving server. This also seems to be specific to Burp's Intruder as the bug wasn't present when automating curl requests via Burp.

IPRotate

DaveYesland commented 8 months ago

I am not seeing this same issue. Did you install this from this repo or through the Bapp store? I notice problems can occur when you have too many concurrent requests, try lowering those to 1 or 3 see if that makes a difference.

jas594 commented 8 months ago

I was only using 1 thread, but on a similar note to concurrent requests, I noticed this Intruder setting was enabled by default. Disabling it fixed the issue! Can you confirm that you also have this disabled?

image

DaveYesland commented 8 months ago

Nice, yeah looks like I do have it disabled as well, Glad you figured it out.