pFad - Phone/Frame/Anonymizer/Declutterfier! Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

URL: http://github.com/Hpd0ger/URLblocker

://github.githubassets.com/assets/primer-70be7debc79a8eff.css" /> GitHub - Hpd0ger/URLblocker: A Burpsuite extension that helps you filter out the useless urls · GitHub
Skip to content

Hpd0ger/URLblocker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

URLblocker

在日常的渗透测试/SRC挖掘过程中,如果没有设置合理的Scope,那么BurpSuite Proxy默认会记录全量HTTP/S日志。这其中充斥着大量OPTIONS、API收集、缓存更新等rest请求。这些请求不仅会占用内存空间,还会增加HTTP History分析的复杂度

image.png

How it Works

结合了以往使用BurpSuite的经验,大概有两种过滤HTTP HISTORY的思路:

  1. 参考filter-options的做法:设置URL黑名单机制,当请求的URL命中黑名单时,通过插件改变流量包响应的MIME值。例如,使其变为Content-Type: text/css,从而被HTTP History默认的规则过滤

image.png

  1. 设置Scope/Excude From Scope,默认接受所有的HTTP流量,排除指定URL的流量 image.png

综上,第一种方案不仅要改变MIME,很多情况下还需要对Response Body进行修改,这是因为BurpSuite会根据Body推测MIME类型。而这一高危操作很可能使网站的正常功能受损,得不偿失。因此,URLBlcoker采用第二种方案

How to use it

  1. 使用mvn编译插件
mvn clean package
  1. 安装BurpSuite插件:target/burp-url-blocker-1.0-SNAPSHOT-jar-with-dependencies.jar
  2. 安装成功后,点击Burpsuite面板的「Target」⇒ 「Scope」,勾选「Use advanced scope control」,在Include in scope中增加一个选项,并设置除Protocol字段外的其余为空值,点击OK

image.png

  1. 在任意的HTTP History中右键调用插件,随后的流量将不会记录在History中 image.png

About

A Burpsuite extension that helps you filter out the useless urls

Resources

Stars

Watchers

Forks

Packages

 
 
 

Contributors

Languages

pFad - Phonifier reborn

Pfad - The Proxy pFad © 2024 Your Company Name. All rights reserved.





Check this box to remove all script contents from the fetched content.



Check this box to remove all images from the fetched content.


Check this box to remove all CSS styles from the fetched content.


Check this box to keep images inefficiently compressed and original size.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy