buby keyword search send

Author(s):

Ken Johnson [CKTRICKY]

Description:

Searches Burp's proxy history looking for parameters that meet keyword searches (keywords are listed in the LFILE). When found, sends to repeater and intruder and then alerts the user of the activity.

References:

None

Module Options:

LFILE   wordlists/buby/keywords.txt   true       Directory Traversal Strings File
RURL    http://www.example.com        true       Enter the remote url value

Options Explained (Module Specific):

RURL -- When the search occurs, it will only return keywords found in parameters from this site or RURL.

LFILE -- This is the keyword list you'd prefer to use.

Real world example:

I'd like to search thru Burp's proxy history for requests that have parameters in the query that match my keyword list. While I could use the default list provided by wXf, I have my own list. I'll place that list under the datum/wordlists/buby directory for easy retrieval. Type reload lfiles and choose my file. The name of my keyword file is my_keywordlist.txt

set LFILE wordlists/buby/my_keywordlist.txt
set RURL http://www.example.com
run