Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Execute system commands from burp extension

hazem | Last updated: Nov 17, 2022 10:14PM UTC

How do i execute system commands on linux from a burp extension ? tried the following from the Jython docs and it didn't work nc = "echo something | tee -a /path/to/file" p = Popen(nc , shell=True) and it didn't work, tried also some other stuff like os and others but nothin worked, is burp stopping the commands from being executed ? if its not then how do i run system commands from an extension ?

Hannah, PortSwigger Agent | Last updated: Nov 18, 2022 11:06AM UTC

Hi. It is possible to execute system commands from extensions. There are a few examples of this on the BApp Store currently. A recent Jython extension that demonstrates some usage of the command line as part of its functionality can be found here: https://github.com/nccgroup/web3-decoder

hazem | Last updated: Nov 18, 2022 04:22PM UTC

Got it, Thank you very much

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.