Open DanMcInerney opened 4 years ago
Traceback (most recent call last): File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 981, in doActiveScan self.do_checks(injector) File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 1121, in do_checks colab_tests.extend(self._xxe_office(injector, burp_colab)) File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 1121, in do_checks colab_tests.extend(self._xxe_office(injector, burp_colab)) File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 2631, in _xxe_office c = self._send_collaborator(injector, burp_colab, types, basename, content, issue, File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 4294, in _send_collaborator urr = self._make_http_request(injector, req, redownload_filename=x) File "C:\Users\dan\AppData\Roaming\BurpSuite\bapps\b2244cbb6953442cb3c82fa0a0d908fa\UploadScanner.py", line 4380, in _make_http_request attack = self._callbacks.makeHttpRequest(service, req) NullPointerException: java.lang.NullPointerException Upload Scanner Version: 1.0.8 Extension code location: doActiveScan Jython version: 2.7.0 (default:9987c746f838, Apr 29 2015, 02:25:11) [OpenJDK 64-Bit Server VM (Oracle Corporation)] Java version: 14 Burp version: Burp Suite Professional 2020 9.2 Command line arguments: Was loaded from BApp: True Request: 'POST /api/v1/xxxx/ HTTP/1.1\r\nHost: xxxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 root@myof3ucdn36n7pjdn667745mpdv9p9dy.burpcollaborator.net\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nCache-Control: no- transform\r\nPragma: no-cache\r\nX-CSRFToken: Ajrxe2HgCGGOehwaJNoRwfnfcXMF6gDKayNB0m1QftVk8oYlx1nlZNKrpl02WgOm\r\nContent-Type: multipart/form- data; boundary=---------------------------127764582316186539414222681358\r\nContent-Length: 227\r\nOrigin: xxx\r\nConnection: close\r\nReferer: http://bjy4ojx28srcse428vrwstqba2gyasyh.burpcollaborator.net/ref\r\nCookie: OptanonConsent=isIABGlob al=false&datestamp=Fri+Oct+30+2020+10%3A24%3A15+GMT-0600+(Mountain+Daylight+Time)&version=5.11.0&lan dingPath=NotLandingPage&groups=1%3A1%2C3%3A1%2C4%3A1&hosts=&AwaitingReconsent=false; _ga=GA1.2.204400...