Persistent Burpcollaborator
Get Collaborator Secret token
Burp -> Project Options -> Connections -> Upstream Proxy Server -> then run command below
mitmdump -q -p 8667 -s burpcollaborator-oob.py
Burp -> Project Options -> Connections -> Mics -> -> Burp Collaborator Server. Check on Poll over unencrypted HTTP. Now open Collaborator Client and click Poll now. Copy as many collab as need to be and store it in a file.
Default log will be store in ./collaborator.json