Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do i get burp to automatically extract and display all base64 encoded images ?

Hell | Last updated: Apr 26, 2022 02:52AM UTC

I am using burp suite to intercept traffic from a site, I am trying to view the images from the proxy but the site uses web sockets to send all the images(Base64 encoded strings) at once to be loaded on Demand Which is called "Lazy-Loading" I want to skim through the images really quick. Anyway it would be really useful to be able to do such thing ... as there is literary no solution that can do so currently as far as i know. A Very Explanatory image about the problem https://i.ibb.co/RjTyKkB/22.png Thanks in advance : )

Liam, PortSwigger Agent | Last updated: Apr 26, 2022 09:26AM UTC

We don't think this is currently possible. We do have plans to provide extensibility functionality for WebSockets, at which point you should be able to do this with an extension. We'll update you when this feature is added.

Hell | Last updated: Apr 26, 2022 04:16PM UTC

@Liam Ignore that the request is done over WS , I was able to downgrade it to be over socket.io instead Does the answer still stands ?

Liam, PortSwigger Agent | Last updated: Apr 27, 2022 08:24AM UTC

Is the traffic coming into your HTTP history rather than WebSockets history? If so, then you should be able to access the message data and manipulate it. Once you have access to the data, it should be possible to add a new IMessageEditorTab that has some way to render his image - quite how you would render the image we're not too sure, you would need to find a Java or Python library.

Hell | Last updated: Apr 29, 2022 07:15PM UTC

"Is the traffic coming into your HTTP history rather than WebSockets history?" Yes "it should be possible to add a new IMessageEditorTab that has some way to render his image" That's Exactly what i am looking for Any Guide would be appreciated , It should run a regex first then decode the results i have a python script which when you pass a file containing the strings in it ... it decodes them to images "you would need to find a Java or Python library" Would i be able to insert the python script to the IMessageEditorTab ? Thanks a lot

Hannah, PortSwigger Agent | Last updated: May 03, 2022 09:12AM UTC

Hi You can find some guides to writing your own extensions for Burp Suite here: https://portswigger.net/burp/extender We'd recommend starting your extension from one of the sample extensions given. If you're comfortable writing in Python, the following extension would be the most helpful to start off your extension with: https://github.com/PortSwigger/example-custom-editor-tab/blob/master/python/CustomEditorTab.py I believe the following would probably be helpful when trying to display the image in your new tab: - https://www.daniweb.com/programming/software-development/code/444843/a-jython-image-viewer - https://code.activestate.com/recipes/252144-view-an-image-url-with-jython-and-swing/

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.