jsonp
jsonp copied to clipboard
kapytein
jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.
Web applications do not acknowledge additional query parameters supplied in HTTP requests. Developers simply fetch whatever parameters they need from the request. Hence, if `callback` parameter exists on an endpoint,...
https://github.com/kapytein/jsonp/blob/master/jsonp.py#L124. The `IHttpRequestResponse` object is from the original request, while we should include the altered request by the extension. Currently, as a temporary solution, the callback URL is included in...
Currently, the plugin only checks whether the request responds with `application/javascript` after appending parameters and/or changing the extension of the URL. However, there could be cases where the JSONP endpoint...