Burp Suite User Forum

Create new post

Update the content of the Intruder attack window

I would like to intercept a request after an intruder attack is started. After the intercept, I want to modify the request and send them out. At the moment I'm trying it with a httpListener, but this does not update the...

Last updated: Jun 15, 2015 02:25PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Adding a header with ISessionHandlingAction

I have a super simple extension to just jack in a static header for an api authentication on a Backbone site. It doesn't work, and I don't know why. Anyone have any ideas? from burp import IBurpExtender from burp import...

Last updated: Jun 04, 2015 02:24PM UTC | 3 Agent replies | 5 Community replies | Burp Extensions

[python] registered callback 'performAction' never called

I want to use a python extension to calculate a custom header I need to read a header, url and body (in case of POST) and calc a SHA1. my code so far: https://paste.cybertinus.nl/p/u33AS8kCnT I double checked al...

Last updated: Jun 02, 2015 07:15PM UTC | 0 Agent replies | 1 Community replies | Burp Extensions

Burp plugin that does not launch Burp GUI

We want to write a plugin that runs certain Burp functions, but does so in the background, and without launching the Burp GUI. Is there a way to suppress the GUI while executing certain functions (e.g., Scan)? Please...

Last updated: Jun 02, 2015 01:17PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Design of Active Scanner plugin vs InsertionPoints

Hi all, I'm new to extending Burp and I wanted to add an active scanner plugin for XXE injection. Therefore I want it to take all post requests, change the content type to text/html and perform some xml entity queries...

Last updated: May 15, 2015 02:28PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Is it possible to get the request that originated a response from a MessageEditorTab?

Hi, Is it possible to get the request that originated a response from a MessageEditorTab? Im only adding the tab for the responses, I want to search a log file based on a request header and paste the log entry in the...

Last updated: May 11, 2015 10:30AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Sqlite-jdbc and jython

Hello, I am trying to do a Python Burp Suite extension (with jython 2.7) and I want to use sqlite to save some data. I have some code examples to use "sqlite.JDBC" working properly with "jython" through the following...

Last updated: Apr 24, 2015 08:24AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Burp extension - OS Scanner

Just wondering if there are any type of extensions that may report OS vulnerabilities at all.

Last updated: Apr 22, 2015 08:38AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Use "Extract" UI in Plugin

Hello, Is it possible to integrate the existing Intruder "Define grep extract item" UI (or the Macro::Configure Item "Define Customer Parameter" UI) as part of an extension? I read through the API documentation but could...

Last updated: Mar 27, 2015 01:31AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Parsing AMF3 - Burp

Hi, I have a Flex app that is sending data using AMF3. I can see the contents in the AMF decode just fine. The problem now is that one of my request parameters is a Byte array. I can edit it in Raw mode, but if the length...

Last updated: Mar 13, 2015 07:06PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Need more info on GUI controls, configuration storing and parameters' parsing for my Burp extension

Greetings. I'm trying to compose my first Burp extension, and stumbled upon some problems I haven't been able to resolve with google's help. I have to mention that I'm not so skillfull programmer, also, so I'm in search for...

Last updated: Mar 05, 2015 02:42PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

exitSuite

Can someone provide some example code for stopping burp suite programmatically using exitSuite as a Burp extension?

Last updated: Feb 27, 2015 08:58AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Which Java?

do i need to install Java SE Runtime (oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html) or Java for windows (java.com/en/download/windows_xpi.jsp?locale=en) to work with Extensions correctly? i...

Last updated: Feb 14, 2015 08:55PM UTC | 0 Agent replies | 1 Community replies | Burp Extensions

Browser repeater extansion failed to load

Hi, I'm trying without luck to load "Browser repeater" extension. I'm doing this under 1.6.09 and 1.6.10 Burp Pro versions with jython-standalone-2.5.4-rc1.jar. I'm getting all the time the following error. Does...

Last updated: Feb 11, 2015 12:30PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Additional Scanner Checks Extension

What is the context in which the Additional Scanner Checks extension decides whether or not a header needs the following properties. strict-transport-security x-content-type-options: no sniff X-XSS-protection Some...

Last updated: Nov 28, 2014 12:06PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extension bugs

Hi, Any tips for identifying extensions failing to meet Burp's level of quality? Right now I have java consuming all available CPU and looks like it's not going to recover. Considering how much extra work a crashed...

Last updated: Nov 28, 2014 11:57AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Page 50 of 50

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image