Burp Intruder normally builds its payload list from strings you type or paste in. This extension adds a new "Extension-generated" payload type that instead lets you pick one or more files from disk — each selected file's raw, unmodified content becomes a single payload, used in the order the files were selected.
This is useful when your payloads are naturally file-shaped: binary blobs, serialized objects, large or awkward-to-paste text bodies, etc.
./gradlew jar
The output JAR is written to build/libs/file-content-generator-extension-x.y.z.jar.
- Build the JAR as above (or use a prebuilt one from
build/libs). - In Burp, go to Extensions → Installed → Add.
- Set Extension type to
Javaand select the built JAR file.
- Set up an Intruder attack and mark your insertion point(s) as usual.
- In the Payloads tab, set the payload type to Extension-generated and choose File Content Payload Generator.
- When the attack starts, select the file(s) to use as payload sources in the file chooser dialog. Each file is used, in full, as one payload.