Match and Replace - PathTraversal and User Agent changing

Path traversal changing the {FILE} token, for the file that you want. In this case: {FILE} by etc/passwd If you want, you can also change or add any field in the request. For example, we will change for all requests, the browser used, for the Android. User-Agent.* User-Agent: Mozilla/5.0 (Linux; U; Android 2.2; en-us; Droid Build/FRG22D) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 More info at: * https://github.com/wagiro/BurpBounty * https://twitter.com/BountyBurp