05Building Burp Suite extensions with the legacy Extender API
Running tools through BurpSuite proxy
Medium20MIN
Many tools support either directly or can be built to support the use of proxies. It is good to remember that BurpSuite is ultimately just a proxy, since a browser does send all traffic through BurpSuite. That means, we can also do this with any other tool.
For example, the ffuf tool:
BASH
1ffuf -x http://burpsuite:8080/The following example works with the SQLMap tool and can help with the exercise below:
BASH
1sqlmap -r request.xml --force-ssl --random-agent --proxy=http://127.0.0.1:8080/ --file-read=/etc/passwd1 / 2
Hakatemia Pro
Learn to hack — start here
Hundreds of interactive courses, virtual labs and CTF challenges in your browser. Start a free trial — no card required.