ianxtianxt/burpsuiefakeipburp伪造ip爆破脚本
Forging IP in Burp Suite, and I'm dead serious.
Four small features
In the Repeater module, right-click to select the fakeIp menu, then click the inputIP function, and enter the specified IP:
The program will automatically add all forgeable fields to the request headers.
In the Repeater module, right-click to select the fakeIp menu, then click the 127.0.0.1 function:
In the Repeater module, right-click to select the fakeIp menu, then click the randomIP function:
Random IP brute-forcing is the core feature of this plugin.
Send the packet to the Intruder module, switch the Attack type to Pitchfork mode in Positions, select the valid forgeable fields, and the fields to brute-force:
Following the order of the arrows, set the Payload source to Extensin-generated, set the payload to fakeIpPayloads, and then set the second variable.
Click Start attack to start brute-forcing.
As shown above, each brute-force attempt uses a different forged IP, avoiding being banned.
PS: The prerequisite for random-IP brute-forcing is that the forged IP can bypass server restrictions.
