Professional

Firewall Ferret

It's well known that WAFs only scan up to a certain amount of data per request. This extension allows a tester to manually insert junk data and adds junk data to Active Scans by duplicating each scan check.

Features

  1. The option to manually insert a bullet of X Kilobyte
  2. The option to allow the extension to add a parameter of bullet of X Kilobyte
    1. The following requests are supported: URL-Encoded Body, JSON, XML, Multipart
    2. The following requests are a work in progress: AMF
    3. If the request's content type of unknown to Burp, then the extension will append the entire body with a bullet.
  3. Adds a check for every burp active scan check. The check will take the standard payload and prepend a bullet of the following sizes: 8, 16, 32, 64, 128, 1024

For more information on usage, please check the GitHub.

Author

Author

Anthony Hanel

Version

Version

1.2.1

Rating

Rating

Popularity

Popularity

Last updated

Last updated

19 November 2024

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.