File Content Payload Generator

What it does

Burp Intruder normally builds its payload list from strings you type or paste in. This extension adds a new "Extension-generated" payload type that instead lets you pick one or more files from disk — each selected file's raw, unmodified content becomes a single payload, used in the order the files were selected.

This is useful when your payloads are naturally file-shaped: binary blobs, serialized objects, large or awkward-to-paste text bodies, etc.

Building

./gradlew jar

The output JAR is written to build/libs/file-content-generator-extension-x.y.z.jar.

Installing in Burp

1. Build the JAR as above (or use a prebuilt one from build/libs).
2. In Burp, go to Extensions → Installed → Add.
3. Set Extension type to Java and select the built JAR file.

Usage

1. Set up an Intruder attack and mark your insertion point(s) as usual.
2. In the Payloads tab, set the payload type to Extension-generated and choose File Content Payload Generator.
3. When the attack starts, select the file(s) to use as payload sources in the file chooser dialog. Each file is used, in full, as one payload.