IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request. (by RhinoSecurityLabs)

IPRotate_Burp_Extension Alternatives

Similar projects and alternatives to IPRotate_Burp_Extension

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better IPRotate_Burp_Extension alternative or higher similarity.

IPRotate_Burp_Extension reviews and mentions

Posts with mentions or reviews of IPRotate_Burp_Extension. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-07-18.
  • Let's Talk About Two-Factor Auth
    1 project | /r/CryptoCurrency | 8 Mar 2023
    I rank Yubikey #1 because it is the easiest item to keep safe without sacrificing usability. Most people do not carry their Yubikey around with them everywhere so it can stay protected in your home. TOTP on the other hand is only as hardened as your cell phone is if it gets stolen from you. I once had a friend who knew I was a "hacker" ask me to hack her phone and she handed it to me. I assumed I'd open it, attempt to guess her pin and hand it back as we were eating dinner and I don't carry my laptop everywhere, but she didn't even have a lock on her phone. I went to her also unprotected Venmo app and showed her how easy it would be to send myself money. Now this was years ago and I'd say most people are smart enough to lock their devices but not all methods of device locking are created equal either so know that if you do choose to use TOTP it is only as secure as your phone is. Additionally, most TOTP codes are short (6 digits) whereas Yubikey's code is fairly verbose. If the application does not implement rate limiting in theory a savvy attacker could brute force TOTP. An application that only rate limits by IP could be beaten by someone using a tool like this: https://github.com/RhinoSecurityLabs/IPRotate_Burp_Extension.
  • Created a Python library to bypass IP-based rate limiting: python-requests-rotator :)
    3 projects | /r/bugbounty | 18 Jul 2021
    - Setting up RhinoSecurity's IPRotate Burp extension and then using Burp as your upstream proxy

Stats

Basic IPRotate_Burp_Extension repo stats
2
764
5.8
3 months ago
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com