Skip to content

Instantly share code, notes, and snippets.

View thetsopotsa1's full-sized avatar

CyberAlchemist_99 thetsopotsa1

View GitHub Profile
@thetsopotsa1
thetsopotsa1 / connection-state-attack.bambda
Created October 24, 2025 12:27 — forked from albinowax/connection-state-attack.bambda
Connection state attack Custom Action for Burp Repeater
// For context check out https://portswigger.net/web-security/host-header/exploiting#connection-state-attacks
var connectionId = utilities().randomUtils().randomString(8);
var options = RequestOptions.requestOptions().withConnectionId(connectionId).withHttpMode(HttpMode.HTTP_1);
// Send a simple GET / HTTP/1.1 to the target as the precusor request
var url = requestResponse.request().url();
var precursorRequest = HttpRequest.httpRequestFromUrl(url);
precursorRequest = precursorRequest.withPath("/").withHeader("Connection", "keep-alive");
// Send the attack in the repeater, and update the response pane