Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Credential Stuffing Intruder Payload

Matthew | Last updated: Dec 28, 2021 09:58PM UTC

Is there an easy way to go from a list with username:password combinations with a specific separator (i.e. colon) to do credential stuffing. I found in order to do this I could make two individual files (one with usernames and other with passwords) and then use Sniper attack type with loading two files. cat creds.txt | cut -d ':' -f 1 > burp-custom-users.txt cat creds.txt | cut -d ':' -f 2 > burp-custom-passwords.txt I ran into this during Portswigger Academy Thanks!

Hannah, PortSwigger Agent | Last updated: Jan 05, 2022 12:14PM UTC