Skip to content

NetSPI/JSWS

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

JSWS

Burp Extenstion to parse JavaScript WebService Proxies and create sample requests.

The blog explaining JSWS and the use case can be found at https://blog.netspi.com/attacking-javascript-web-service-proxies-burp/

Download

The plugin can be downloaded from the releases tab and loaded into Burp under the Extender tab.

Use

Right click a request or response containing the JSWS and select Parse JSWS.

alt-tag

This will send the request to the JSWS tab and parse out all possible reqeusts.

alt-tag

From this tab you can send any of the newly crafted requests to Repeater, Scanner, Intruder, etc.