Skip to content

Burp Suite Extension to inject timestamps into HTTP requests

License

Notifications You must be signed in to change notification settings

PortSwigger/timestamp-injector

 
 

Repository files navigation

Timestamp Injector

An easy way to inject up-to-date timestamps into HTTP requests in Burp Suite. Load the extension, replace the value of an outdated timestamp in an HTTP request with "UnixTimeS", and Burp will automatically inject the current Epoch time into this location.

There is a UI interface where you can define a time offset so injected timestamps occur in either the future or past. You can also define a custom timestamp (I.E. yyyy-MM-dd) in the UI to inject.

UI

Examples

UnixTimeS and UnixTimeMS

If you want a timestamp in seconds:

{"timestamp": UnixTimeS}

Becomes:

{"timestamp": 1730349175}

If you want a timestamp in milliseconds:

{"timestamp": UnixTimeMS}

Becomes:

{"timestamp": 1730349333065}

TimeStamp and URLTimeStamp

To inject a custom timestamp defined in the UI:

{"timestamp": TimeStamp}

Becomes:

{"timestamp":2024-11-04 04:43:53 UTC}

You can do the same thing, but automatically URL-encode the timestamp with:

{"timestamp": URLTimeStamp}

Becomes:

{"timestamp":2024-11-04+04%3A48%3A49+UTC}

Custom timestamps are validated and generated using the SimpleDateFormat Java class. You can use single quotes (') around text to include it as-is. For instance:

yyyy-MM-dd'T'HH:mm:ss'Z'

Translates to:

2024-10-31T04:14:31Z

Debugging

All modified calls will appear in the Extension tab in the 'Timestamp Injector' output in Burp Suite.

UI


Build

Requires Gradle to build. Once that is installed, run the following command from the root directory:

gradle build

That should create a 'build' directory with a jar file you can import into Burp Suite.


Releases

See the Releases page for pre-built jar files.

I hope to have this extension on the BApp Store soon.


Acknowledgements

This extension took inspiration from Alex Lauerman's Token Incrementor Burp Extension.

About

Burp Suite Extension to inject timestamps into HTTP requests

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Java 91.6%
  • HTML 8.4%