Comments (4)
https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html
from awssigner.
Hi @rbeede, there are a couple of things that you could provide that would help me jump right into this. Any chance you could provide the following:
- The API that you're calling.
- An example request (just copied out of Repeater or similar) that's not being signed correctly.
I see from your link that we're talking about S3 here, but those additional details would speed up my troubleshooting. Thanks!
from awssigner.
I'm actually testing an API that is not S3 but has X-Amz-Content-Sha256 in it.
Is there a way to force that header to be updated anytime it is seen and not just if the service is S3?
from awssigner.
Thanks for the context @rbeede. I'll need to dig into this a bit more on my side. If you're needing an immediate workaround, it looks like an alternative signing extension recently added support for this scenario. That being said, I'd like to find a way to incorporate this functionality.
from awssigner.
Related Issues (19)
- Incorrect signature as a result of GET URL parameters HOT 3
- How to use AWS signer within BURP HOT 1
- Feature Request - AssumeRole
- Feature Request - Populate profiles from ~\.aws\credentials HOT 1
- Non-basic-Latin Unicode characters aren't handled properly
- Signed headers list must be sorted if "x-amz-security-token" is added HOT 2
- Feature Requests - Flag modified requests in proxy tab HOT 1
- Bug - POST Data Sent Using GET Method Truncates POST Body HOT 1
- Failure to apply proper URL-encoding HOT 1
- Host must be a SignedHeader HOT 2
- Extension Rewrites Host Header HOT 8
- Multi-part/form-data Not Recognized As SigV4 HOT 3
- GUI cuts off some text in extension
- Netspi/awssigner
- NullPointer Exception when importing into burp HOT 5
- Doesn't work at java 11 and Burp v2.0.18 HOT 1
- java.lang.NullPointerException error HOT 8
- feature request - sign custom headers HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from awssigner.