Skip to content

Instantly share code, notes, and snippets.

View albinowax's full-sized avatar

James Kettle albinowax

View GitHub Profile
@albinowax
albinowax / race-condition-probe.java
Last active April 26, 2025 10:39
Race condition custom action for Burp Repeater
// This will use the single-packet attack for HTTP/2, and last-byte synchronisation for HTTP/1
int NUMBER_OF_REQUESTS = 10;
var reqs = new ArrayList<HttpRequest>();
for (int i = 0; i < NUMBER_OF_REQUESTS; i++) {
reqs.add(requestResponse.request());
}
var responses = api().http().sendRequests(reqs);
var codes = responses.stream().map(HttpRequestResponse::response).filter(Objects::nonNull).map(HttpResponse::statusCode).toList();
logging().logToOutput(codes);

Keybase proof

I hereby claim:

  • I am albinowax on github.
  • I am albinowax (https://keybase.io/albinowax) on keybase.
  • I have a public key ASBv05DYL6P70W0BVOQKKiklbP7Q13Fs5RdRJQLD5pJUYAo

To claim this, I am signing this object: