Skip to content

Instantly share code, notes, and snippets.

@graste
Forked from albinowax/race-condition-probe.java
Created April 24, 2025 04:38
Show Gist options
  • Save graste/705c181cd2c9cdefa5a741b63eba0c0c to your computer and use it in GitHub Desktop.
Save graste/705c181cd2c9cdefa5a741b63eba0c0c to your computer and use it in GitHub Desktop.
Race condition custom action for Burp Repeater
// This will use the single-packet attack for HTTP/2, and last-byte synchronisation for HTTP/1
int NUMBER_OF_REQUESTS = 10;
var reqs = new ArrayList<HttpRequest>();
for (int i = 0; i < NUMBER_OF_REQUESTS; i++) {
reqs.add(requestResponse.request());
}
var responses = api().http().sendRequests(reqs);
var codes = responses.stream().map(HttpRequestResponse::response).map(HttpResponse::statusCode).toList();
logging().logToOutput(codes);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment