Burp Suite User Forum

Login to post

Intruder view original payload in the results

Hello! How can i do to view original payload in the results table intruder, before Processing payload rules. I try to do this: [code="python"] def processHttpMessage(self, toolFlag, messageIsRequest, messageInfo): ...

Last updated: Oct 06, 2015 06:13PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Highlight a tab

Is it possible to highlight an extension tab? When you do "Send to repeater" the repeater tab is highlighted. I'm working on a reporting extension, and I've added "Send to report" to the context menu. I'd like it to...

Last updated: Sep 16, 2015 07:32PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

JUnit test with Burp Extensions

Hi, I'm developing a Burp Extension and want to add some testing. Is there a way to create IHttpRequestResponse objects manual? Or retrieve callbacks during a JUnit test, without starting Burp. I do not really know what...

Last updated: Sep 15, 2015 11:28AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

How do I Set a Token in URL Directory.

Hi, I want to set a token in URL Directory. And, I use macro. so I want to custmize Macro (on Intruder). Test Site has a Token in URL directory, don't have a url parameter. (Exp....

Last updated: Sep 14, 2015 08:58AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Adding GetSiteMap() to Carbonator

I'm attempting to add to the carbonator extension a method for extracting the sitemap URLs into a text file. The code I have written so far is below, and the output I get is 'array(burp.IHttpRequestResponse)'. I know I need...

Last updated: Sep 08, 2015 07:30PM UTC | 2 Agent replies | 3 Community replies | Burp Extensions

Portable Burp Suite: Windows Auto Start Script

This script will automatically run the latest burp Jar and set java home path for portable installs :) @echo off echo this includes: echo portable java 8 64bit echo python support in burp echo CO2 and Logger++ echo...

Last updated: Sep 04, 2015 07:17PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

How to change proxy by an extension when using intruder

Hello there. I posted a question( http://forum.portswigger.net/thread/1646/change-upstream-proxy-extension ) on forum not long ago, and developer gave me a rather primitive but direct recommendation. Actually, I toke...

Last updated: Sep 04, 2015 02:31AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

burp hangs while shell command completes

Hello, I have an extension which calls a shell command that takes a bit to complete. After invoking this from the context menu, burpsuite hangs and resumes after the command completes. I have tried using threading to avoid...

Last updated: Sep 01, 2015 09:18AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

The scanner report size is not consistant for the same web site.

Hi we have a job (scheduled to run once a day) that invokes BURP (with carbonator extension) through cammand line. this setup is been working for quite a while. when we look at scanner reports we see that some days it is...

Last updated: Aug 12, 2015 01:18PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

How to send a post request?

I read the document and know that we could use `makeHttpRequest` to send request. I've tried that if I used `PARAM_URL`, it success. I've read this thread...

Last updated: Aug 10, 2015 09:31AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

How Does Burp Handle Responses?

Hi, I hope this is not a duplicate question, but I couldn't find the response to it. I wonder if it is worth checking if the response I'm analyzing for the PDF Metadata Extension is actually a PDF file before reading the...

Last updated: Aug 10, 2015 08:20AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

How to transfer some domain’s requests to my server?

I use Burpsuite as a proxy, and I want to collect all the requests of some domain, then send these requests to my server . For example, I want to collect all the requests of [target.com]. When a request like below come...

Last updated: Aug 04, 2015 02:22AM UTC | 3 Agent replies | 4 Community replies | Burp Extensions

Running automated scans with Carbonator

We installed Carbonator from within the Burp scanner under the BApp store and ran the following command for as a test: java -jar Xmx2g c:\Users\Desktop\Burpsuite_pro_v1.6..21.jar https://www.google.com. We received the...

Last updated: Jul 31, 2015 08:13AM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Re-writing responses

I am trying to write my first extension to add a csp header to the response. I have found several articles about adding headers to the requests but none for responses. This if my first try, which does not work. Any pointers...

Last updated: Jul 30, 2015 03:21PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Request and response time API must be implemented for logging functionality.

I have asked in Burp Suite User Forum about "Accessing the response time" for long time ago, and I am waiting for 1.5 years approximately, regarding to http://forum.portswigger.net/thread/686/accessing-response-time...

Last updated: Jul 17, 2015 07:28AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Adding POST request to site map also adds a GET for same URL

I have a simple class that implements IHttpRequestResponse and IHttpService. I use it to construct a IHttpRequestResponse object that is ultimately added to the site map using IBurpExtenderCallbacks#addToSiteMap. When...

Last updated: Jul 16, 2015 12:19PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

JRuby + Swing: Stderr doesn't go to UI until extension reload

Burp 1.6.20, tried JRuby 1.7.12 and 9.0.0.0.rc1. In registerExtenderCallbacks, I instantiate a class that creates a Swing UI for my extension's configuration. The config UI creates a DefaultTableModel to hold my config...

Last updated: Jul 07, 2015 07:56AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

VirusTotal Extention

Greetings- I've been writing an extension that will take a URL that is intercepted by burp and submit it to VirusTotal for analysis. Here is a snippet: def changeSelection(self, row, col, toggle, extend): ...

Last updated: Jul 06, 2015 10:45AM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

Issue with the IBurpExtenderCallbacks method removeHttpListener

I'm trying to remove a HttpListener that I have created. I noticed in the extender javadocs that there is a method called removeHttpListener, however the method doesn't exist in the IBurpExtenderCallbacks.java interface. I'm...

Last updated: Jun 26, 2015 08:39PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Python interface text control

Hi guys, I am reading the API documentation and i have not clean the funtion that i need to use for my question. Easy question, what API funtion i have to use for control the text portion selected from any part of...

Last updated: Jun 25, 2015 02:29PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Page 27 of 28

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image