search

tagomaru / burp-extension-postman-integration

Postman Integration is an extension for burp to generate Postman collection fomat json file.
MIT License
7 stars 9 forks source link

EXCLUDED_HEADERS are too strict from a Pentester point of view #1

Closed cwaazywabbit closed 5 years ago

cwaazywabbit commented 5 years ago

The headers removed include for example: "Host", "User-Agent", "Origin"

which from a pentester point of view are necessary to remain in the request, as they could be an attack vector.

Cheers

tagomaru commented 5 years ago

@cwaazywabbit Thx for raising this up. ok, i will update it, just a moment pls.

tagomaru commented 5 years ago

Use https://github.com/tagomaru/burp-extension-postman-integration/blob/v1.1/build/libs/postman-integration-1.1.jar temporally.

This will be published to BApp Store at a later date.

cwaazywabbit commented 5 years ago

Thanks for the swift response. We have already cloned a local copy for our custom needs, but thanks for the minor build. Looking forward to seeing it pushed to BApp store, which would make it easier to track future releases.

Cheers

cwaazywabbit commented 5 years ago

v1.2 is now available on BApp Store. I think it's time to close this issue :-)

https://github.com/portswigger/postman-integration