Skip to content

Hacked together script for feeding urls into Burp's Sitemap

License

Notifications You must be signed in to change notification settings

ZephrFish/BurpFeed

Repository files navigation

BurpFeed

A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs. Originally an idea that @InfoSecPS and I threw together, then I tweaked and hacked together this chaos!

The tool is written in both Python and Go, GoBurpFeed was written by Mantis and ZephrFish while the python version has been a collaboration between ZephrFish, InfosecPS and Mantis.

GoBurpFeed will be the only supported version from now on as the python version has been migrated to a legacy state.

A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs.

GoBurpFeed Setup

To set this up, you'll need the following:

Install

go install github.com/ZephrFish/BurpFeed@latest

Manual Setup

To set this up, you'll need the following:

  • Burp Suite
  • Go

Chuck your target URLs or IPs in a file, can be named whatever but must have http/https prefixed at the start of line for this to work.

When you've got all of this setup you can refer to usage.

Usage:

go build .
./BurpFeed -h
Usage of BurpFeed:               
-debug         
  Turn on debug mode                            
-filename string
  ./path/to/urls.txt
-proxy string
  The HTTP proxy you want to feed it through (default "http://127.0.0.1:8080")     
-threads int
  Number of concurrent jobs to run (default 10) 

Headers File

The headers file should split by new-lines and in the HeaderName: HeaderValue format.

This can be used to set custom headers, cookies, etc. For example:

Cookie: authCookie=VGVzdHZhbHVl;
Authorization: Bearer VGVzdHZhbHVl

Gophers

The gopher was found in this repository: https://github.com/egonelbre/gophers/