Burp Suite User Forum

Create new post

Get All URLs from a Website

Hello, I am currently writing a burp Extension. I need to get all URLs from the Website before the active Scan. How can I do this? Thanks

Last updated: Jan 04, 2020 02:34AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Pause scanner from extension

Is there any API to pause the scanner from an extension? For example, let's say you are scanning an API with a rate limiter, and your extension can detect that you are getting close to the limit, can it pause the scanner to...

Last updated: Dec 31, 2019 11:25AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

hi

<script> alert (1) </ script>

Last updated: Dec 19, 2019 04:51PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

OpenAPI Parser

I am not able to get the OpenAPI Parser to work. I keep getting an error message saying that "The OpenAPI specification contained in <file name> is ill formed and cannot be parsed". However, the very same file can be...

Last updated: Dec 06, 2019 02:40PM UTC | 2 Agent replies | 4 Community replies | Burp Extensions

Payload generator UUID

Is there an extension of the burp that create UUIDs on payloads?

Last updated: Dec 03, 2019 11:19AM UTC | 3 Agent replies | 3 Community replies | Burp Extensions

Burp Carbonator does not work for me

I am trying to play around with the carbonator feature of Burp using the demo.testfire application as a test run and had a few questions and issues. Issues: I have installed carbonator and using the command " java -jar...

Last updated: Dec 03, 2019 11:10AM UTC | 4 Agent replies | 4 Community replies | Burp Extensions

XML tab "Reparse" Programmatically

Hi, I would like to know how the "Reparse" button in the request/response "XML" tab reformats XML documents programmatically via Java. Specifically, I am wondering what library(s) are used for this. I am asking for the...

Last updated: Nov 30, 2019 03:01AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Extension load error code

os win 7 java.lang.ExceptionInInitializerError at org.python.util.PythonInterpreter.<init>(PythonInterpreter.java:100) at org.python.util.PythonInterpreter.<init>(PythonInterpreter.java:94) at...

Last updated: Nov 27, 2019 12:06PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

IMessageEditorTab check Tool

I'm trying to create a simple jython extension to run a regex against the HTTP response and extract key fields into a new IMessageEditorTab. Is there anyway in IMessageEditorTab.isEnabled or...

Last updated: Nov 21, 2019 12:18PM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Burp Extension for Intruder Payload with multiple payload lists

Hi, I am working on creating a extension for burp suite where a user can choose from a list of payload lists [one list for angular payloads, one list for react payload] according to the framework of the application he is...

Last updated: Nov 11, 2019 11:31AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

IContextMenuInvocation - getSelectedMessage of original request / response

Hi I have added a custom context menu item, which reads the selected text of the currently open request / response. So far so good, however in the history view of Burp, when i have three tabs, i can only differentiate...

Last updated: Nov 04, 2019 09:07AM UTC | 4 Agent replies | 3 Community replies | Burp Extensions

Burp Suite Automation

Hi All We are trying to automate to test various vulnerabilities like xpath injection,sql injection, Cross-site scripting etc. We have referred the following link...

Last updated: Oct 31, 2019 10:33AM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Send to decoder programmaticaly from extensions

There are methods in IBurpExtenderCallbacks for sending data to - repeater, - intruder, - comparer, and - spider. Why isn't there one for decoder? When writing a custom message editor with a custom editor...

Last updated: Oct 28, 2019 01:17PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

buildParameter not working

I built the HttpRequest using buildHttpMessage method and trying to add Cookie and Body param using LegacyBurpExtender.getInstance().getHelpers().buildParameter and addParameter and updateParameter methods and it is not...

Last updated: Oct 23, 2019 01:18PM UTC | 3 Agent replies | 1 Community replies | Burp Extensions

Burp Enterprise Edition/Pro Edition can be integrated with Microsoft Team Foundation Server 2017?

Hi Burp Team, Currently we are evaluating the trial version of Burp Enterprise edition tool for security testing in our organization. The requirement is to integrate Burp Enterprise Edition/Pro Edition with Microsoft Team...

Last updated: Oct 22, 2019 09:48AM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

BLAZER

Hi, I am testing a Flash application, I cam across AMF and Blazer extender. I would like to test AMF using Blazer, I am looking for a tutorial or some documentation for how to use Blazer. It would be great if you could help...

Last updated: Oct 14, 2019 03:31PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

burp command line

Hi, I would like to bring up BURP using command line (without any GUI) for automation. Is there a way to bring it up without a project file? If I do not specify the project file on the command line, it will bring up GUI...

Last updated: Oct 10, 2019 09:59AM UTC | 9 Agent replies | 8 Community replies | Burp Extensions

Old version of AutoRepeater in the BApp store

Hello, extension AutoRepeater is available in the BApp store as version 1.0 from April, 4th 2018. The latest commit from the original repository https://github.com/nccgroup/AutoRepeater was on July 27th, 2019. Any...

Last updated: Oct 07, 2019 09:48AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Add Custom Headers stopped to work.

Hi Guys! Any changes in Add Custom Headers extension? It stopped to work on Linux/Windows/1.7 and 2.X Burp versions. (:

Last updated: Oct 03, 2019 12:07PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Trouble integrating requests python library and jython

Im currently building a burp extension using Jython. At one point I basically get URLs from the proxy Tab and make an additional request with that url+someEndpoint with the Python Requests library. The extension works...

Last updated: Oct 03, 2019 08:12AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Page 33 of 48

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image