Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Payload generator UUID

Cristiano | Last updated: Sep 27, 2018 11:19PM UTC

Is there an extension of the burp that create UUIDs on payloads?

PortSwigger Agent | Last updated: Sep 28, 2018 09:01AM UTC

I'm not aware of one, but it would be a fairly simple exercise to create one. Would you be looking for something that let you put a token like $UUID in a request, and replaced this with a random UUID?

Burp User | Last updated: Oct 01, 2018 09:55PM UTC

Exactly! I want to use this on the Intruder.

PortSwigger Agent | Last updated: Oct 02, 2018 09:24AM UTC

Ok. I've coded you a quick extension that does this: - https://github.com/pajswigger/uuid-payload-generator Be aware that it produces an unending list, so you're best using it with the pitchfork attack type.

Burp User | Last updated: Oct 02, 2018 03:29PM UTC

Thank you! This is awesome! How to do in uppercase?

PortSwigger Agent | Last updated: Oct 02, 2018 03:31PM UTC

Glad you like it! You can add a payload processing rule to "modify case" and "to upper case"

Burp User | Last updated: Dec 03, 2019 11:19AM UTC

You can use the Hackvertor plugin and use a JavaScript tag like this: <@javascript_1("output = 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) { var r = Math.random() * 16 | 0, v = c == 'x' ? r : (r & 0x3 | 0x8); return v.toString(16); })","3333154d2cf762c4faef782083342e62")><@/javascript_1> This will generate a random UUID.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.