Burp Suite User Forum

Login to post

Save and restore state of an extension

Hi! I'm working on a "Save and Restore state" for a Burp Suite plugin. The state must contain also some IHttpRequestResponsePersisted. My idea was to save host, port, protocol, request bytes and response bytes and then...

Last updated: Jan 03, 2016 10:52AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Bapp Extension Signature

When installing a Burp extension from the Bapp Store I see a "BappSignature.sig" file is part of the install. I assume this is a Bapp Store generated digital signature of the extender package and is checked by Burpsuite when...

Last updated: Dec 30, 2015 03:34PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extract Response Message Body

Hey , I am making my first extension using Java in NetBeans, and I need to extract the message from the Response so that I can perform my operations over it. But after checking the examples and other javadocs , I was...

Last updated: Dec 30, 2015 10:40AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Customizing my TAB

Hey, I was writing my first extension with the aim to encrypt the selected responses to md5/sha1/etc based on user selection. Based on the custom logger extension example in the blog, I made my new tab with display and...

Last updated: Dec 30, 2015 10:39AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

start burp remotely with Remote procedure call (windows)

Hi, We need to start burp on a windows server remotely using Remote procedure call. We also need the burp started with an extension loaded. Since we are not able to specify an extension on command line, we start burp...

Last updated: Dec 24, 2015 09:49PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

start burp from perl script

Hi, I try to start burp from a simple PERL script. Then do some tests after burp starts. my $cmd = "java -Xmx1g -Djava.awt.headless=true -jar \"c:\\BURP\\burpsuite_free_v1.6.30.jar \" 1> null 2>&1"; print "start...

Last updated: Dec 22, 2015 01:07PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

NotImplementedError with latest Jython release

The following change for the latest Jython release might break some UI-centric extensions: "Abstract methods of an inherited class or interface from Java now raise NotImplementedError, instead of returning None (in Java,...

Last updated: Dec 10, 2015 07:37PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

IExtensionHelpers.makeHttpRequest() with cookies

It appears that IExtensionHelpers.makeHttpRequest(URL) does not include session cookies in the resulting request. How can I construct a GET request that includes the session cookies? Is there a helper method to get all...

Last updated: Nov 24, 2015 06:03PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Scanner vs processHttpMessage (python)

Dear All, I have the following processHttpMessage() function to modify the scanner requests and check SQLi: def processHttpMessage(self, toolFlag, messageIsRequest, messageInfo): # only process requests ...

Last updated: Nov 17, 2015 06:16PM UTC | 0 Agent replies | 1 Community replies | Burp Extensions

Jython Error for Burp Extension

Hey, I am trying to configure the jython api for Burp Suite and I am getting the following error. Does anyone know what I can do to fix this? root@osboxes:~/jython-burp-api# java -jar jython.jar -Dpython.path=Lib/ run.py...

Last updated: Nov 13, 2015 01:42PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

getComment() not returning comment

Hey, I've wanted to read the comment of a request/response object. I'm using Jython and Java8. It's an implementation of a passive scanner, and the way I wanted to access: self._requestResponse.getComment() If I...

Last updated: Nov 11, 2015 07:27AM UTC | 1 Agent replies | 2 Community replies | Burp Extensions

Extender API broken link

Hi, the extender page (https://portswigger.net/burp/extender/) has a link to a 2012 post titled "Writing your first Burp Suite extension" at http://blog.portswigger.net/2012/12/writing-your-first-burp-extension.html which...

Last updated: Oct 20, 2015 08:50AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

makeHttpRequest is very slow

Hi all, I'm writing an extension that aims at sending many requests from multiple sessions of different users. Currently, I'm using callbacks.makeHttpRequest(...) to send requests but that method takes a very long time...

Last updated: Oct 14, 2015 07:51AM UTC | 3 Agent replies | 3 Community replies | Burp Extensions

Intruder view original payload in the results

Hello! How can i do to view original payload in the results table intruder, before Processing payload rules. I try to do this: [code="python"] def processHttpMessage(self, toolFlag, messageIsRequest, messageInfo): ...

Last updated: Oct 06, 2015 06:13PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Highlight a tab

Is it possible to highlight an extension tab? When you do "Send to repeater" the repeater tab is highlighted. I'm working on a reporting extension, and I've added "Send to report" to the context menu. I'd like it to...

Last updated: Sep 16, 2015 07:32PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

JUnit test with Burp Extensions

Hi, I'm developing a Burp Extension and want to add some testing. Is there a way to create IHttpRequestResponse objects manual? Or retrieve callbacks during a JUnit test, without starting Burp. I do not really know what...

Last updated: Sep 15, 2015 11:28AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

How do I Set a Token in URL Directory.

Hi, I want to set a token in URL Directory. And, I use macro. so I want to custmize Macro (on Intruder). Test Site has a Token in URL directory, don't have a url parameter. (Exp....

Last updated: Sep 14, 2015 08:58AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Adding GetSiteMap() to Carbonator

I'm attempting to add to the carbonator extension a method for extracting the sitemap URLs into a text file. The code I have written so far is below, and the output I get is 'array(burp.IHttpRequestResponse)'. I know I need...

Last updated: Sep 08, 2015 07:30PM UTC | 2 Agent replies | 3 Community replies | Burp Extensions

Portable Burp Suite: Windows Auto Start Script

This script will automatically run the latest burp Jar and set java home path for portable installs :) @echo off echo this includes: echo portable java 8 64bit echo python support in burp echo CO2 and Logger++ echo...

Last updated: Sep 04, 2015 07:17PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

How to change proxy by an extension when using intruder

Hello there. I posted a question( http://forum.portswigger.net/thread/1646/change-upstream-proxy-extension ) on forum not long ago, and developer gave me a rather primitive but direct recommendation. Actually, I toke...

Last updated: Sep 04, 2015 02:31AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Page 26 of 28

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image