Burp Suite User Forum

Login to post

Using IBurpExtenderCallbacks.makeHttpRequest at Background

I am trying to send 10 new requests after all requests generated by proxy. For that, I am handling requests in processHttpMessage method and sending requests with IBurpExtenderCallbacks.makeHttpRequest. It works but the...

Last updated: May 02, 2017 08:02AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

SAX2 driver class org.apache.xercer.parses.SAXParser not found

Hello friends I'm trying to parse XML from requests in my plugin but every time this error occours: java.lang.ClassNotFoundException: org.apache.xerces.parsers.SAXParser at...

Last updated: May 02, 2017 07:48AM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

IMessageEditor get selected Offset (similar to textEditor)

Hi Team I'm using an IMessageEditor object to create a combination of repeater and intruder. However, the function i am missing for IMessageEditor is the getSelectionBounds() (which exists for ITextEditor . What would be...

Last updated: Apr 28, 2017 01:53PM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Custom Hotkey for Burp Extension

Dear Portswigger Team, Is it possible to register a hot key for an action provided by an extension? My use case is the following: I have created a new behaviour for "Send to Intruder" (default ctrl+i) and for this...

Last updated: Apr 24, 2017 09:33AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Intercept Burp's requests and set authenticated upstream proxy.

Hi, I want create an extension that will intercept and proxy Burp's requests. I noticed I can implement IHttpListener and override processHttpMessage() and set a new IHttpService for each request. The problem is...

Last updated: Apr 13, 2017 03:23PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Control of the Intruder Engine

Does the present version of burp suite provides any API to control the Intruder engine that means using custom scheduler and firing each packets. Every thing we found till now is to custom payload.

Last updated: Apr 13, 2017 03:22PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Issue Deserializing AMF messages with burpsuite

I am unable to deserialize AMF messages in response only. I am using the current version of Burpsuite. I have used both the builtin in AMF analyze and display option and the AMFDSer extension. They were only able to...

Last updated: Apr 11, 2017 06:34PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

Possible Classpath Issues when using beansbinding (JSR 295)

Hi everyone I am currently trying to finalize my Burp Suite extension. To bind POJOs to the View (two-way binding) I am using beansbinding respectively betterbeansbinding (JSR 295). When I start my extension via NetBeans...

Last updated: Mar 24, 2017 12:27PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Auto-marking parameters in URL paths in intruder

The swurg extension allows parsing swagger json files into items in burp that can be then sent to intruder, repeater, or scanner. However, swagger json files allow for parameters inside URL paths. There seems to be no way...

Last updated: Mar 14, 2017 11:15PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Binding proxy on custom port programmatically

In my extension i want to accept all requests on custom port (for example 1337). There is no actual server on my computer, just another tool in the Internet, which would send there requests. I thought about proxy listener,...

Last updated: Mar 13, 2017 11:49AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

extract all parameters in request before scanner starts

I need to extract all parameters in request before scanner starts. I know that "doActiveScan" of IScannerCheck interface finds parameters, but parameter names can be extracted after active the scanner starts working. but I...

Last updated: Mar 08, 2017 03:05PM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Making new custom tab in Intruder

Hey, guys. I want to make new custom tab like this https://github.com/PortSwigger/example-custom-editor-tab , but in Intruder, but didnt find API to do it. Is it possible?

Last updated: Mar 06, 2017 04:49PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

doActiveScan is not getting called and no Active Scanning is performed

Hello I'm burp pro user the Issue i'm facing is the doActiveScan is not getting called for the example provided in teh blog http://blog.portswigger.net/2012/12/sample-burp-suite-extension-custom_20.html When i try to...

Last updated: Feb 24, 2017 04:29PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

jruby SSLSocket error

I'm currently developing the Dradis Framework Burp extension (https://github.com/dradis/burp-dradis/) and I'm encountering an error when the extension is trying to POST to the Dradis Pro server using...

Last updated: Feb 22, 2017 06:57AM UTC | 1 Agent replies | 2 Community replies | Burp Extensions

Burp automation encountered error: Attempting to auto-select SSL parameters

Hi: I built an extension and it is working fine to login, select scope, spider and do active scan. The scan takes a few hours. On windows setting, the scan can finish in 2 and half hour. On linux machine, however, it...

Last updated: Feb 08, 2017 04:37PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Burp CSJ

When I attempt to use this extension using Firefox as the browser, an instance of Firefox shows pops up, hangs around for a while showing no activity, then I get an 'Exception Breakpoint' from Firefox and that's all she...

Last updated: Feb 08, 2017 09:00AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Making a request after every Scanner response, depending on the response contents.

I'm not sure whether this is possible via a mixture of macros / an extension, but here's my problem. I'm trying to scan a request that creates an entry in a database, and the request includes the name of the new entry....

Last updated: Feb 02, 2017 12:05PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

registerSessionHandlingAction throwing errors

Whenever I try to load callbacks.registerSessionHandlingAction(self) I get errors. I've seen other posts which are similar to mine, where Dafydd is able to run the extension without errors....

Last updated: Feb 01, 2017 06:30PM UTC | 1 Agent replies | 2 Community replies | Burp Extensions

auto scan pre-populated site map

Hi, I have built a site map for a host that I am interested. I would like to scan this site map automatically (without spidering it before scanning) I am thinking to build an extender that will do following: (1)...

Last updated: Jan 27, 2017 09:00AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

loadExtensionSetting() does not see extension options any more

I was using callbacks.loadExtensionSetting() to load my extension settings from config file. In json it looked like: { "user_options":{ ... "extender":{ "extensions":[ { ...

Last updated: Jan 25, 2017 03:12PM UTC | 2 Agent replies | 0 Community replies | Burp Extensions

Page 22 of 29

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image