Skip to content

Instantly share code, notes, and snippets.

@albinowax
Last active April 26, 2025 10:39
Show Gist options
  • Save albinowax/101e3b2e605496db1ddf84d14f5d0485 to your computer and use it in GitHub Desktop.
Save albinowax/101e3b2e605496db1ddf84d14f5d0485 to your computer and use it in GitHub Desktop.
Race condition custom action for Burp Repeater
// This will use the single-packet attack for HTTP/2, and last-byte synchronisation for HTTP/1
int NUMBER_OF_REQUESTS = 10;
var reqs = new ArrayList<HttpRequest>();
for (int i = 0; i < NUMBER_OF_REQUESTS; i++) {
reqs.add(requestResponse.request());
}
var responses = api().http().sendRequests(reqs);
var codes = responses.stream().map(HttpRequestResponse::response).filter(Objects::nonNull).map(HttpResponse::statusCode).toList();
logging().logToOutput(codes);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment