Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Using burp intruder to generate an ID

M | Last updated: Feb 13, 2019 11:14AM UTC

Hello, I need to iterate through a payload position. The payload position is an ID that looks like this "123456789A". 9 numbers followed by a letter. I want to use burp intruder in order to generate all possible combinations with this. Can you help me?

PortSwigger Agent | Last updated: Feb 13, 2019 11:33AM UTC

You can use the Brute Forced payload to help with this. You'll need to use a separate payload for the numbers and letters. Configure two insertion points next to each other. Configure the first with Brute forcer, configure the character set (123456789) and length (9). Configure the second with the character set (ABCDEFGHIJKLMNOPQRSTUVWXYZ) and length (1). That's a lot of combinations this may be too many for Intruder, although there are various options to reduce memory usage.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.