Professional Community
A burp suite extension that reviews backup, old, temporary, and unreferenced files on the webserver for sensitive information.
OWASP references:
Why would I use this extension?
As I analyzed some of "backup finder" tools, I realized that almost all of the available tools use only static payloads (they use built-in dictionaries) and they don't generate dynamic payloads based on target which is being tested.
This extension will find all backup, old and temp files in this scenario:
Quick Start
Fine Tuning (To have the best results)
This extension uses the datas in the target tab (which are collected actively or passively) under the domain name that you call extension for as its feed. to have the best result, it's recommended that you first do these steps before starting the extension process:
Author |
Author
Moein Fatehi |
---|---|
Version |
Version
0.2 |
Rating |
Rating |
Popularity |
Popularity |
Last updated |
Last updated
04 August 2022 |
Estimated system impact |
Estimated system impact
Overall impact: Low
Memory
Low
CPU
Low
General
Low
Scanner
Low
|
You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.
|
You can view the source code for all BApp Store extensions on our GitHub page. |
|
Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates. |
Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.
Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.