资源说明:
## Introduction BurpAMFDSer is a Burp plugin that will deserialze/serialize AMF request and response to and from XML with the use of Xtream library (http://xstream.codehaus.org/) BurpAMFDSer also utilizes part of Kenneth Hill's Jmeter source code for custom AMF deserialization (https://github.com/steeltomato/jmeter-amf) ## Usage ###1 Start Burp plugin java -classpath burp.jar;burpamfdser.jar;xstream-1.4.2.jar burp.StartBurp ###2 Inspect serialized AMF traffic - Serialized AMF request/response will be automatically converted to XML. Decoded XML should be in "Edited Request" and "Original Response" tabs. - Fuzz the request using Repeater/Intruder. Request will be automatically serialized back to binary format and response will be deserialized in XML format ###3 Bypass client-side authorization: Sometimes the client rely on server for authorization check. In case you may want to modify the serialized response to bypass it: - Inspect proxy response for possible authorization check - Modify potentially abusive parameters to bypass client-side restrictions
本源码包内暂不包含可直接显示的源代码文件,请下载源码包。