Skip to content

Instantly share code, notes, and snippets.

View JesseClarkND's full-sized avatar
🌴
On vacation

Jesse Clark JesseClarkND

🌴
On vacation
View GitHub Profile
@JesseClarkND
JesseClarkND / NoFud.json
Created June 23, 2021 19:18
Burp DNI config file
{
"project_options":{
"connections":{
"hostname_resolution":[],
"out_of_scope_requests":{
"advanced_mode":false,
"drop_all_out_of_scope":false,
"exclude":[],
"include":[],
"scope_option":"suite"
Rule Desciption
CrossSiteScripting_COOKIE Checks the cookie values for malicious javascript
CrossSiteScripting_QUERYARGUMENTS Inspects the all query parameter's names & values
CrossSiteScripting_BODY Inspects the request body
CrossSiteScripting_URIPATH URL paths (again think RESTful)
Rule Desciption
SQLiExtendedPatterns_QUERYARGUMENTS Inspects the all query parameters names
SQLi_QUERYARGUMENTS Inspects the all query parameter's values
SQLi_BODY Inspects the request body
SQLi_COOKIE Cookie values (Are cookie names covered? idk)
SQLi_URIPATH URL path (think RESTful API)
house,leader,seat
Stark,Jon Snow,Winterfell
Lannister,Cersei Lannister,Kings Landing
Targaryen,Daenerys Targaryen,Dragonstone
Greyjoy,Pyke,Euron Greyjoy