saurabhsam96216 / burp-header-injector

Burp Free plugin to test for host header injection vulnerabilities. (Development)

burp-header-injector

Plugin for Burp Suite Free wich detects reflected parameterss in responses generated server side.

Introduction

Finding reflected parameters is alway useful for testing reflected XSS issues. Find them while browsing with this plugin for burp free.

Developement

This extension is currently in developement.

TODO

• Add configurable headers to inject and the values to inject
• Maybe, the functionality could be added as a feature to the burp reflected param project.

Setup

Download the jar file located in the releases section and import it in the extender option of burp suite. For more information about how to use extender option see the official documentation

Local compilation

If you want to compile the code yourself, you need to have maven installed and run the following command in the base directory of the project:

$ mvn clean install

Contibuting

Feel free to create an issue or a pull request if you see any bugs.