Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

modify position depend response burp

Jesus | Last updated: Dec 20, 2018 04:51AM UTC

I have a mongo db injection: /? search = admin '&& this.password.match (/ ^ 5§§. * $ /)% 00 which is blind then I want that depending on the answer that I get in the intruder, for example: and /? search = admin '&& this.password.match (/ ^ 5e§§. * $ /) %00 move the position and add the previous payload and continue performing the intruder How could I do this action?

PortSwigger Agent | Last updated: Dec 20, 2018 10:01AM UTC

Unfortunately this isn't possible with Intruder. You would need to code an extension or script to automate this. Intruder does have recursive grep, where payloads depend on the previous response, but I don't think that will work in this case.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.