PwnBack requires PhantomJS to run. You can download it from here
To understand why it is required currently see the section PhantomsJS
The plugin has several settings that a user can define depending on their hardware setup.
# of PhantomJS WebDrivers
# of HTTP Response Parsers
In BurpSuite open the Extender Tab
Click the Add button
Locate the jar file included in this repo.
The current version of is v1.7.21, I am unable to guarantee backward support.
Run the following commands
git clone https://github.com/k4ch0w/PwnBack.git cd PwnBack ./gradlew fatJar
This project is licensed under the MIT License - see the LICENSE.md file for details
There is an issue with the JVM's Cert storage on certain computers and the SSL certificate provided by archive.org If you see no traffic being generate run the following command and provide the path to the CA-Bundle
curl --remote-name --time-cond cacert.pem https://curl.haxx.se/ca/cacert.pem