search

xnl-h4ck3r / GAP-Burp-Extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist
1.23k stars 132 forks source link

Question #7

Closed 0xspade closed 1 year ago

0xspade commented 1 year ago

I saw in the bottom picture of this tool that it has a generated query string of all parameters, is it possible that it also appends in the URL as you browse or at least check for it's reflection?

I'm thinking a way if it is possible to combine with this tool.

xnl-h4ck3r commented 1 year ago

HI @0xspade . Thanks for taking the time to use GAP and raise an issue. I'll look into that and get back to you! Thanks

xnl-h4ck3r commented 1 year ago

Hi @0xspade. I've looked into this, but I don't think I'll be able to do that. GAP only gathers parameters and links when you run it because there is quite a lot of post processing needed to get those, and also to ensure not a million duplicates, etc. So it doesn't gather info as you use it. Also, the concatenated query string of parameters can quicly get huge which can cause problems because of length of the URL. It's probably better to use separate extensions to help with this. Also, in GAP v2.0 I removed the concatenated parameter query string because of it's limited use, but I will probably add that back in again soon! Thanks Xnl