ncoblentz

[{
    "description": "Encapsulation boundary for data such as keys and certificates",
    "regex": "-----BEGIN",
    "sections": ["res_headers", "res_body"]
}, {
    "description": "Generic API Key",
    "regex": "(?i)api.{0,5}key[^&|;?,]{0,32}?['\\\"][a-zA-Z0-9_\\-+=\\/\\\\]{10,}['\\\"]",
    "sections": ["res_headers", "res_body"]
}, {
    "description": "Generic Secret",

ncoblentz

Integer mySelection = new Integer(0);
boolean mustBeInScope=true;
ZonedDateTime requestsAfterThisDate = ZonedDateTime.of(LocalDateTime.of(2024, 1, 19, 10, 0,0,0), ZoneId.of("America/Chicago")); // or null
ZonedDateTime requestsBeforeThisDate = ZonedDateTime.of(LocalDateTime.of(2024, 1, 19, 10, 10,0,0), ZoneId.of("America/Chicago")); // or null

//Most of these come from: https://github.com/PortSwigger/bambdas/tree/main/Proxy/HTTP
/*
-1: No Filter
0: Normal filter
1: Large redirect responses

ncoblentz

☐ ☒

✅ ✔️

❎ ❌

⁉️ ❗ ❓ ?

💡 ⚠️ ⛔ 🚫

ncoblentz

... just the web services part ...
<system.serviceModel>
    <services>
      <service name="MPRBSL.WebServices.AuthenticationService" behaviorConfiguration="anonymousServiceBehavior">
        <endpoint address="" contract="MPRBSL.WebServices.IAuthenticationService" binding="wsHttpBinding" bindingConfiguration="myWsHttpsBinding" />        
      </service>      
      <service name="MPRBSL.WebServices.IngredientsService" behaviorConfiguration="authenticatedServiceBehavior">
        <endpoint address="" contract="MPRBSL.WebServices.IIngredientsService" binding="wsHttpBinding" bindingConfiguration="myWsHttpsBinding" />       
      </service>
      <service name="MPRBSL.WebServices.ShoppingListService" behaviorConfiguration="authenticatedServiceBehavior">

ncoblentz

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.ServiceModel;
using MPRBSL.Helpers;
using WebMatrix.WebData;

namespace MPRBSL.WebServices
{

ncoblentz

using System;
using System.Collections.Generic;
using System.Linq;
using System.Transactions;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;
using DotNetOpenAuth.AspNet;
using Microsoft.Web.WebPages.OAuth;
using WebMatrix.WebData;

ncoblentz

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Http;
using System.Web.Mvc;
using System.Web.Optimization;
using System.Web.Routing;
using Mvc4WithAuthentication.Auth;

ncoblentz

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;

namespace Mvc4WithAuthentication.Controllers
{    
    [Mvc4WithAuthentication.Auth.CoupleSessionAndFormsAuth()]
    public class HomeController : Controller

ncoblentz

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using WebMatrix.WebData;
using System.Web.Routing;

namespace Mvc4WithAuthentication.Auth
{

ncoblentz

# -*- coding: utf-8 -*-
"""
Created on Thu Jan 10 08:20:14 2013

@author: Nick Coblentz
"""

from burp import IBurpExtender
from burp import IScannerInsertionPointProvider
from burp import IScannerInsertionPoint