forked from eric-m-holub/timestamp-injector
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathBappDescription.html
45 lines (25 loc) · 1.66 KB
/
BappDescription.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<p>An easy way to inject up-to-date timestamps into HTTP requests.</p>
<p>If you have an API that needs a current or non-duplicate timestamp value to return properly, you can replace the old timestamp value with "UnixTimeS" to inject the current Epoch time into the call.</p>
<h2>Usage</h2>
<p>Replace the value of an outdated timestamp in an HTTP request with "UnixTimeS". Burp will automatically inject the current Epoch time into this location.</p>
<p>It will match:</p>
<blockquote><code>{"timestamp":UnixTimeS}</code></blockquote>
<p>And replace it with:</p>
<blockquote><code>{"timestamp":1730346030}</code></blockquote>
<p>Other possible commands are:</p>
<ul>
<li>UnixTimeMS — Injects Epoch time in milliseconds</li>
<li>TimeStamp — Injects a custom timestamp defined in the UI. I.E. yyyy-MM-dd</li>
<li>URLTimeStamp — Same as previous command, but URL-encoded</li>
</ul>
<h2>Configuration</h2>
<h3>Custom time offset</h3>
<p>Use the UI interface to define a time offset so injected timestamps occur in either the future or past.</p>
<h3>Custom timestamp</h3>
<p>Define a custom timestamp format to inject. For example, yyyy-MM-dd.</p>
<p>Custom timestamps are generated using the <a href="https://docs.oracle.com/javase/8/docs/api/java/text/SimpleDateFormat.html">SimpleDateFormat</a> Java class. Please see their documentation for a list of supported characters.</p>
<p>You can include text as-is into your timestamp with single quotes.</p>
<p>For example:</p>
<blockquote><code>yyyy-MM-dd'T'HH:mm:ss'Z'</code></blockquote>
<p>Becomes:</p>
<blockquote><code>2024-10-31T04:14:02Z</code></blockquote>