[Enhancement]

[0xspade]

Should also check for:

GET http://burpcollab/some/endpoint HTTP/1.1
Host: example.com
...

or

GET @burpcollab/some/endpoint HTTP/1.1
Host: example.com
...

or

GET /some/endpoint HTTP/1.1
Host: example.com:80@burpcollab
...

or changing the host header

GET /some/endpoint HTTP/1.1
Host: burpcollab
...

or overriding the sites

GET /some/endpoint HTTP/1.1
Host: example.com
X-Forwarded-Host: burpcollab
...

Reference:

https://portswigger.net/research/cracking-the-lens-targeting-https-hidden-attack-surface

[ethicalhackingplayground]

Thanks so much for this enhancement. :) I will get these implemented as soon as possible.

[0xspade]

Yep, read albinowax presentation first so that you have an idea. good thing you created this burp extension. I always wanted to make one but don't know how. :)

[ethicalhackingplayground]

Thanks so much. I've seen the presentation there are some cool tricks I might have in mind.

[0xspade]

yeah yeah.. looking forward to the updates :)

[ethicalhackingplayground]

@0xspade Hey man, I've implemented the features you asked for.

I'm going to close this issue for now, if you find anything wrong with the new features Please let me know.

Regards, Blake.