A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs. Originally an idea that @InfoSecPS and I threw together, then I tweaked and hacked together this chaos!
The tool is written in both Python and Go, GoBurpFeed was written by Mantis and ZephrFish while the python version has been a collaboration between ZephrFish, InfosecPS and Mantis.
GoBurpFeed will be the only supported version from now on as the python version has been migrated to a legacy state.
A tool for passing and adding a list of URLs to Burp's sitemap/target tab, really useful for populating the targets tab with a big list of URLs.
To set this up, you'll need the following:
- Burp Suite
- FLOW Burp Extension (https://github.com/hvqzao/burp-flow), also available on BApps store :-)
- GO Binary either downloaded or build from easy install below.
go install github.com/ZephrFish/BurpFeed@latest
To set this up, you'll need the following:
- Burp Suite
- Go
Chuck your target URLs or IPs in a file, can be named whatever but must have http/https prefixed at the start of line for this to work.
When you've got all of this setup you can refer to usage.
go build .
./BurpFeed -h
Usage of BurpFeed:
-debug
Turn on debug mode
-filename string
./path/to/urls.txt
-proxy string
The HTTP proxy you want to feed it through (default "http://127.0.0.1:8080")
-threads int
Number of concurrent jobs to run (default 10)
The headers file should split by new-lines and in the HeaderName: HeaderValue format.
This can be used to set custom headers, cookies, etc. For example:
Cookie: authCookie=VGVzdHZhbHVl;
Authorization: Bearer VGVzdHZhbHVl
The gopher was found in this repository: https://github.com/egonelbre/gophers/
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent