Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Custom payload processor / generator

Quiecis | Last updated: Nov 21, 2018 04:48PM UTC

My intruder scenario is brute forcing uids that are calculated based date. Current intruder has date payload, that is superb for the job. Now i would like to process these dates with my custom extension that formes uid from date. However there is one to many relationship here - one date generates up to 999 different uids. How can i return multiple processed payloads from my extension processPayload function? Other possibility would use custom IntruderPayloadGenerator - then comes the question of options for custom payloadgenerator and dates payload already exists with nice from-to interface.

PortSwigger Agent | Last updated: Nov 21, 2018 04:53PM UTC

As you've noticed, payload processors can only return a single item. I think it would be a really good feature for them to be able to return multiple items, and I have added this to the development plan. In the meantime, I looked at some potential workarounds. However, they all became quite hacky and I didn't find one I'm happy to recommend to you. You'll need to implement you own date generation within your IIntruderPayloadGenerator.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.