Burp Suite User Forum
When I attempt to use this extension using Firefox as the browser, an instance of Firefox shows pops up, hangs around for a while showing no activity, then I get an 'Exception Breakpoint' from Firefox and that's all she...
I'm not sure whether this is possible via a mixture of macros / an extension, but here's my problem. I'm trying to scan a request that creates an entry in a database, and the request includes the name of the new entry....
Whenever I try to load callbacks.registerSessionHandlingAction(self) I get errors. I've seen other posts which are similar to mine, where Dafydd is able to run the extension without errors....
Hi, I have built a site map for a host that I am interested. I would like to scan this site map automatically (without spidering it before scanning) I am thinking to build an extender that will do following: (1)...
I was using callbacks.loadExtensionSetting() to load my extension settings from config file. In json it looked like: { "user_options":{ ... "extender":{ "extensions":[ { ...
In Extensions, do passive scan checks (implementing IScannerCheck.doPassiveScan) automatically get applied to all responses of active scans as well? Or is passive scanning only done for the initial request/response and...
I`m create in Idea java project, save burp interface file into project but IDE no resolve burp classes. I`m know that is question about specific IDE, but I search best way to write extension. Folder structure . +--...
If I call setMessage on a IHttpRequestResponse instance, it does not update the Proxy History window automatically. However, if I force a redraw (for example by clicking on the item), the new comment appears, so it seems...
I'm using IHttpRequestResponse makeHttpRequest(IHttpService httpService, byte[] request) to send a modified request that I got from an IScanIssue. If the target host is down, I get a timeout (return == null) and it takes...
Hi, i was installing xssvalidator in Burp suite free edition but i am unable to do it, i am getting the following issue Step1: installed xssvalidator in burp Step2: Downloaded ant & installed it Step3: creating...
As the subject states, the first call to IBurpExtenderCallbacks.sendToRepeater() will not rename the numbered tab in the repeater to the last parameter (the tab caption string). Subsequent calls to sendToRepeater do set the...
I have a custom active scanner extension which makes a finite number of requests via callbacks.makeHttpRequest(). This does not appear to increment the current active scan with the correct number of requests being made and...
Hi Guys, I have a few questions regarding the BApp extensions if some one could answer or redirect. 1. What are the measures taken that the code in the extension are secure.? 2. What is the process of uploading a new...
Now that Extender plugins can use collaborator, it can be used to identify issues. The built-in active scanner can use this to attach the relevant interactions to the reported issue. Based on the IScanIssue interface, I can...
Hi! I'm developing an extension and I was wondering how can I get the vulnerable parameter for an issue. For example, in a Cross-site scripting as the one in the picture (http://imgur.com/a/aKqn9), is there a method to get...
Hi, I'm trying to make the DetectDynamicJS extension an active scanner extension instead of a passive scanner, which it is right now, to adhere to the rule that passive scanners don't issue requests. I'm a little...
Hello, I am attempting to write my first burp extension in Python, but I found myself stuck at adding issues to the list of findings. Basically, my code is monitoring for new issues within newScanIssue(self, issue) in...
Hi, I had a question regarding the process for properly building (compiling and creating jar files) Java burp extensions. According to the normal process for this, the Extender interface files should be exported from...
I'm trying to write an extension of BURP to reduce the number of checks to be done while performing and Active/Passive scan. Our tool already provides integrity validation for links and non-editable data, so my idea was to...
Hello, if anyone is usinf xss Validator, I really need help. I downloaded PhantomJS and also the xss,js file. I also downloaded Slimer but I have no idea where I get slimer.js. I think slimer is not needed, as I saw...
Page 44 of 50
Your source for help and advice on all things Burp-related.