Burp Extensions - Page 6 - Burp Suite User Forum

I can't install Highlighter and Extractor extension

Hi! I have a problem with the "Highlighter and Extractor" extension, it happens that when I want to install it from the BApp Store or manually, it gives me the following error: java.lang.Exception: Extension class is not...

Batch Scan Report Generator - faild to create reports

After the new Burp Professional upgrade version 2022.9.5, Batch Scan Report Generator is failling to create reports. The plugin print the message "Report Generation Complete!" but it it doesn't saved the report to the...

Montoya API: Burp 2023.10.2.4: java.lang.Exception: Extension class is not a recognized type

I have created a helloworld extension using the Montoya java code and getting the below error when I try to load (exported runnable jar: helloworld.jar) it in Burp UI: java.lang.Exception: Extension class is not a...

Error in JRuby extension in newest Burp versions

Hello, I've started to get errors in JRuby extension starting from v10 of Burp Community Edition (MacOS M1). JRuby version is 9.3.11.0 The error is raised when 'net/http' library is used. The error...

CO2 extension marked by antiviruses as malware

The CO2 extension is considered malware by more AV/EDR vendors. I could not find a reason behind it and our EDR vendor did not share their reasons either. Do you have a clue what is going on here? The page for the...

Show changed responses from Extension in Repeater tab

Hello! I develop my custom extension (using Montoya API) which modifies request from the Repeater before sending it to the target host. It works great - in Logger I see all changes. But I am also want to see modified...

Time based request

Hi Team, Does burp suite has any functionality wherein it can revoke either an extension or a request after a certain period of time? Or any extension having the functionality wherein it can send a request after a...

Turbo Intruder - race-single-packet-attack.py Not queueing requests

Hello, I'm doing some research regarding James Kettle's single packet race conditions. I've tried his probe script as well as race-single-packet-attack.py but it doesn't actually queue the requests. The majority of...

Does Burp create a copy of an installed extension?

When developing a new extension, one has to install it multiple times. I noticed that Burp Suite will keep track of where the JAR is originally located when you add it as an extension. I was curious if it's possible...

Turbo Intruder: Script with randomly generated strings

The integrated Intruder is great, but I still wanted to use the speed of the Turbo Intruder for some tests in our fuzzy lab. The handling of the characterstrings to be generated has to be very flexible and this is what came...

Error Message: 'Configuration JSON Found' in Burp Suite Extension Loading

I'm using burpsuite pro v2023.10.3.1 and I'm currently facing an issue while loading extension on java and python enviroment. I can install java 18 in windows11 and i have loaded jython-standalone. When I attempt to load an...

Turbo intruder has encoding base64??

Hi dear İ have a target it's login page encoded with base64 (user password) i easily could attacked successfully with intruder because it had payload rule that encoding credentials to base64 or hash or .... but in turbu...

extension error when load in java environment

"I'm encountering an issue in Burp Suite where I receive a 'configuration JSON found' error message when trying to load an extension. Could you please help me diagnose and resolve this problem?" "I've come across an...

Single Connection in BCheck

I am creating a BCheck on Client-Desync and Request Smuggling and I need to be able to configure the BCheck to perform the requests in "Single Connection" mode but I don't see how to do it in the documentation.

Custom Burp Extension Estimated System Impact

Can anyone explain how Burp calculates the "estimated system impact" for a custom (non-BApp) extension?

ssl scanner not producing results other tools can

The SSL Scanner extension: https://portswigger.net/bappstore/474b3c575a1a4584aa44dfefc70f269d has not been able to scan many sites (mainly internal, so I cannot share) They are scanned properly by other ssl applications,...

Cannot see custom Python Extension

Hi. I have a custom Python script extension to delete Burp Cookies. However, when I loaded it in burpsuite, I can not invoke it the extension to run with Macros because it ddid not display for selection. The extension is...

CVSS Score generate suite

Hi all, this is a big task for me is that without CVSS Score in reports in our organisation the stakeholders are accepting the reports so,please provide the root cause for this CVSS Score generation by using the extension

Checking which extension initiated the request in Montoya API

Hi, just like in the topic name - I have HttpRequestToBeSent object and would like to see which extension does it come from (for example - Param Miner specifically). Currently I only know how to check whether the request...

Using Montoya API How do I insert Text String into the Request Editor?

I have the context menu working... but I can't figure out how to insert some text. Looking for a Current java Montoya example of inserting Text into the Request Editor. Goal is to replace a selection, or simply insert...