Лови отстук прямо в терминале.
Burp Suite Collaborator Client
================================
Reverse engineered from burpsuite
Protocol (v4 compatible):
1. Generate 32 random bytes as secret
2. biid = urlencode(base64(secret_bytes))
3. Key derivation: SHA-1(secret) -> base256-to-base36 -> 22-char key with checksums
4. Payload generation: random(2) + checksum(1) + nrg_cipher(key_material)
5. Poll: HTTPS GET /burpresults?biid=<biid> on polling.<server>
6. Parse JSON response with interaction events (DNS, HTTP, SMTP)
Key discoveries:
- Polling endpoint is polling.oastify.com OR polling.burpcollaborator.net
- Cipher is nrg.b() modular addition with output feedback (NOT RC4)
- Token is ~30 chars using alphabet charset (NOT hex-encoded)
- e8e constructor uses c=1 and counter string format "%x%c" % (n, 'y')
Author: @Neoleads