Skip to content

Adding support for generating UUIDv4 strings #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lopci wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Adding support for generating UUIDv4 strings #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions BappDescription.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,10 +6,10 @@
<li>In the session handling options, create a rule which invokes the
Randomizer action that is registered by the extension, and select a suitable
scope for the rule.</li>
<li>Place the string #RANDOM# or #RANDOMNUM# into the relevant request at the location
where a random value or number is required.</li>
<li>Place the string #RANDOM#, #RANDOMNUM# or deadbeef-1337-1337-1337-deadbeeeeeef into the relevant request at the location
where a random value, random number or UUIDv4 string is required.</li>
<li>Let Burp operate on the request in the normal way (via Scanner,
Intruder, etc.).</li>
<li>The extension will replace the string placeholder with a random value in
each request.</li>
<li>The extension will replace the string placeholder with a random value or
an UUIDv4 string in each request.</li>
</ul>
4 changes: 4 additions & 0 deletions Burp-Randomizer.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,13 +18,15 @@
import re
import string
import random
import uuid

### Configuration ###
# Character set of generated tokens
tokenCharset = string.ascii_letters + string.digits
# String which is replaced with random token
placeholder = "#RANDOM#"
placeholderNum = "#RANDOMNUM#"
placeholderUUID = "deadbeef-1337-1337-1337-deadbeeeeeef"
# Length of generated token. WARNING: length of token must equal length of placeholder due to a bug in Burp 1.5.21 which cuts off requests under certain conditions.
tokenLength = len(placeholder)
tokenLengthNum = len(placeholderNum)
Expand All @@ -38,6 +40,7 @@ def registerExtenderCallbacks(self, callbacks):
callbacks.setExtensionName("Randomizer")
self.callbacks.registerSessionHandlingAction(self)
self.out = callbacks.getStdout()
self.placeholderUUID = re.compile(placeholderUUID)
self.placeholder = re.compile(placeholder)
self.placeholderNum = re.compile(placeholderNum)
random.seed()
Expand All @@ -51,5 +54,6 @@ def performAction(self, currentRequest, macroItems):
randomToken = "".join([random.choice(tokenCharset) for i in range(tokenLength)])
randomTokenNum = str(random.randint(10 ** (tokenLengthNum - 1), 10 ** (tokenLengthNum) - 1))
request = self.placeholder.sub(randomToken, request)
request = self.placeholderUUID.sub(str(uuid.uuid4()), request)
result = self.helpers.stringToBytes(self.placeholderNum.sub(randomTokenNum, request))
currentRequest.setRequest(result)
3 changes: 2 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,8 @@ handling rule.
Send the request to the Repeater/Intruder and put #RANDOM# where
randomization is required. Then send this request to the Scanner,
Intruder or some different tool. The extension now replaces each
occurence of #RANDOM# with a random token and #RANDOMNUM# with random number.
occurence of #RANDOM# with a random token, #RANDOMNUM# with a random number
and deadbeef-1337-1337-1337-deadbeeeeeef with an UUIDv4 string.

## Configuration

Expand Down