Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for filtering, modifying and replaying saved requests #129

Open
forgedhallpass opened this issue May 31, 2022 · 2 comments
Open
Labels
Priority: Medium This issue may be useful, and needs some attention. Type: Enhancement Most issues will probably ask for additions or changes.

Comments

@forgedhallpass
Copy link
Contributor

forgedhallpass commented May 31, 2022

Since we already support saving requests into files, it would be nice if we would also enable post-processing/filtering of those requests.

Use-case:

  1. automatically/manually crawl an application and proxy the requests through proxify
  2. look at the saved requests saved, notice some interesting things/patterns
  3. filter the existing local requests using your observations (e.g. consider requests only targeting a specific URL path like /api/v1/)
  4. realize it would make sense to change the session id (e.g. admin vs user session to look for authorization issues)
  5. replay the filtered and modified local requests against the target, or potentially even against another similar targets
  6. pipe it through httpx and filter only requests that returned 200 OK

Note: merging current reply in proxify will be handled in a follow-up ticket

@forgedhallpass forgedhallpass added the Type: Enhancement Most issues will probably ask for additions or changes. label May 31, 2022
@ehsandeep ehsandeep added the Priority: Medium This issue may be useful, and needs some attention. label Jun 6, 2022
@laluka
Copy link

laluka commented Jul 30, 2022

Definitely a needed feature, it would be awesome to be able to take a raw file and replay it, or submit it many times with various modification (burp-intruder-like feature with some extra scripting) !

@mohakim
Copy link

mohakim commented Dec 25, 2023

+1 on this. Could be super useful. Burp proxy history and repeater equivalent. mitmproxy also supports this I think.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Priority: Medium This issue may be useful, and needs some attention. Type: Enhancement Most issues will probably ask for additions or changes.
Projects
None yet
Development

No branches or pull requests

4 participants