search

silentsignal / burp-piper

Piper Burp Suite Extender plugin
https://blog.silentsignal.eu/2020/03/27/unix-style-approach-to-web-application-testing/
GNU General Public License v3.0
113 stars 12 forks source link

Update defaults.yaml (gron) #11

Closed ngregoire closed 4 years ago

ngregoire commented 4 years ago

Add support for 'gron' as a message viewer https://github.com/tomnomnom/gron

dnet commented 4 years ago

Thanks! Just out of curiosity, why did you limit it to responses only? Doesn't it make sense to use gron for JSON requests as well?

ngregoire commented 4 years ago

I limited gron to responses because JSON requests are much less common than responses. But technically, it could be applied to both..

dnet commented 4 years ago

I see your point, that setting was designed for cases where it never makes sense to apply it for requests or responses, so it's kind of a last resort. Before that, there was no way to filter for requests or responses, resulting in ugly hacks. For example, responses have no URL parameters, thus there's not even a 0.0001% chance for a URL parameter mangler to be usable for responses. :)