Burp Suite User Forum

Create new post

Numbers Intruder payload: add support for multiple ranges

Jon | Last updated: Aug 15, 2016 07:00PM UTC

Instead of using separate fields for min/max, please change this to a single box that accepts a comma-delimited list of dash-separated inclusive ranges. I.e., 1-50,60-70,80,91-100 (decimal) 0,8-D,20-7E (hex) I think it would make sense to fail validation (or at least warn) on attack start if any of the ranges overlap. This would make these types of attacks much quicker to set up and repeat.

Burp User | Last updated: Aug 17, 2016 03:24PM UTC

I just realized the hex numbers should have the standard 0x prefix because it may be desirable to be able to mix decimal and hex in the list. (Can't edit the original post.)

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.