ActiveScan3Plus
ActiveScan3Plus copied to clipboard
add support for Collaborator
Some RCE tests would work much more reliably using Burp Collaborator:
- [x]
PhpPregArrayusedphpcredits() - [ ]
RoRCheckcould also be augmented with this, it currently injectsidand looks foruid=andgid=in the response - [ ] same with
CodeExecwhich currently usessleepandpingand measures response time
In both cases above, nslookup could be used to interact with Collaborator in a platform-independent way:
nslookup [is] available on both windows and *nix systems by default. Ping is an obvious alternative, but when invoked on Linux it never exits and thus may hang the executing thread.