Tagged: Burp Suite extension

February 15, 2024

sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens

Sessionless Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner, ItsDangerous Signer, Express cookie-session middleware, OAuth2 Proxy, and Tornado’s signed cookies. It provides automatic detection and in-line editing...

Web Vulnerability Analysis

February 2, 2022

TProxer: Burp Suite extension to find reverse proxy path based SSRF

TProxer A Burp Suite extension was made to automate the process of finding reverse proxy path-based SSRF. How it works Attempts to gain access to internal APIs or files through...