HAKATEMIA
05Building Burp Suite extensions with the legacy Extender API

Running tools through BurpSuite proxy

Medium20MIN

Many tools support either directly or can be built to support the use of proxies. It is good to remember that BurpSuite is ultimately just a proxy, since a browser does send all traffic through BurpSuite. That means, we can also do this with any other tool.

For example, the ffuf tool:

BASH
1ffuf -x http://burpsuite:8080/

The following example works with the SQLMap tool and can help with the exercise below:

BASH
1sqlmap -r request.xml --force-ssl --random-agent --proxy=http://127.0.0.1:8080/ --file-read=/etc/passwd
1 / 2
Hakatemia Pro

Learn to hack — start here

Hundreds of interactive courses, virtual labs and CTF challenges in your browser. Start a free trial — no card required.