Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Manual Install of Burp Extension

fenceposterror | Last updated: Dec 11, 2015 11:25AM UTC

Hi, I hope I didn't miss it anywhere on the website, but I couldn't find how to install a local Jython extension in Burp through the Manual Install-button in the BApp Store tab. The extension runs fine in Extender->Extensions, and then add it there. The reason I'd like to install it, is because the paths that I need for specifying are different ones for different extensions. Also I'd like to be able to share it more easily with colleagues. The article https://support.portswigger.net/customer/en/portal/articles/1965930-how-to-install-an-extension-in-burp-suite did not help unfortunately, but maybe that is not where I would have needed to look. What does the Manual Install require as file to load? Can I just add folder in the bapps/ folder?

PortSwigger Agent | Last updated: Dec 11, 2015 12:19PM UTC

The only way to install a custom (non-BApp store) extension is at Extender / Extensions / Add, as you've been doing. You can place your extension code, and anything else it requires, in whatever location you want, and just tell Burp where to load it from. The manual installation of BApps doesn't do anything different which you can't do yourself in the normal way.

PortSwigger Agent | Last updated: Feb 19, 2016 09:23AM UTC

Hi Manish, For Java extensions, you could share with the jar file without sharing the source code. Be aware that Java can be decompiled, although there are obfuscators that make this harder. However, for the BApp Store, one of the requirements for inclusion is that your extension is open source.

Burp User | Last updated: May 25, 2018 09:54AM UTC

Is there any way by which I can share the customer extension without sharing the code?

Burp User | Last updated: Jul 31, 2018 11:25AM UTC

hi i want install this extension but how to add please help me https://github.com/nccgroup/BurpSuiteHTTPSmuggler/ this extension after download is zip must be ranem to jar or .... please tell me how to add in email thanks :x

PortSwigger Agent | Last updated: Jul 31, 2018 12:32PM UTC

That repository doesn't contain a binary so you need to compile it yourself. You'll need to install JDK and Ant, then just run "ant" in the source directory. This will compile the code and make a jar that you can load into Burp. If you're stuck, let me know. I've already compiled it successfully, so could send you the jar.

Burp User | Last updated: Apr 19, 2019 08:47PM UTC

Hi, I want to install this extension https://github.com/wagiro/BurpBounty/ I have read this answer https://support.portswigger.net/customer/portal/questions/15958022-manual-install-of-burp-extension here is a similar question and you answer the question as "That repository doesn’t contain a binary so you need to compile it" Can you please give me the JDK and Ant Download link and guide me step by step And how to run “ant” in the source directory to compile the code. Thanks in advance. :-)

PortSwigger Agent | Last updated: Apr 23, 2019 10:41AM UTC

That extension is in the BApp Store, under the name "Scan Check Builder". Also, the Github does have pre-compiles releases. I don't know how the extension author compiles it. In the PortSwigger fork we've introduces a Gradle file: - https://github.com/PortSwigger/scan-check-builder

Burp User | Last updated: Feb 05, 2020 05:53AM UTC

Hi, I want to install this extension : https://github.com/summitt/Burp-Non-HTTP-Extension/releases/tag/v1.5 I added it as Extender -> Extensions -> Add -> Java -> NopeProxy.jar. It is showing "The extension loaded successfully". But the Nope Proxy tab is not coming up. My Burp suite version is v2.1.07. Thanks in advance :)

Hannah, PortSwigger Agent | Last updated: Feb 05, 2020 11:28AM UTC

It appears that the NoPE extension is no longer being maintained and the last supported version of Burp is 1.7: https://github.com/summitt/Burp-Non-HTTP-Extension/issues/33 It appears that a different developer has released a version of the extension that is supported in later versions: https://github.com/summitt/Burp-Non-HTTP-Extension/pull/38 I would recommend attempting to get in contact with the extension author, or using the different developers working version.

iam | Last updated: Jul 25, 2020 05:30PM UTC

https://github.com/nccgroup/BurpSuiteHTTPSmuggler/ i want install this extension can you help me i am stuck i don't know how should i compile so can compile this and share with me

Uthman, PortSwigger Agent | Last updated: Jul 27, 2020 08:47AM UTC

You will need to use Ant to build the JAR: 1. Clone the repo: git clone https://github.com/nccgroup/BurpSuiteHTTPSmuggler.git 2. ant -f build.xml - https://howtodoinjava.com/ant/ant-build-jar-file-example/ - https://ant.apache.org/

Sateesh | Last updated: Dec 13, 2021 05:46AM UTC

Hi Portswigger Could you please help me know how to add this scanner into the burp extender? https://github.com/whwlsfb/Log4j2Scan and Now log4j is a critical vulnerability across the java application, it will be great if any extension is used to find Log4j vulnerability

Uthman, PortSwigger Agent | Last updated: Dec 13, 2021 09:50AM UTC

Pedro | Last updated: Dec 14, 2021 06:35AM UTC

Hi @Sateesh, download this link https://github.com/tangxiaofeng7/BurpLog4j2Scan/releases :)

Pentester | Last updated: Jun 08, 2023 06:31PM UTC

Hi! How do I add this extension to my Burp? https://github.com/PortSwigger/postman-importer It doesn't have instructions. Thanks!

Dominyque, PortSwigger Agent | Last updated: Jun 14, 2023 07:38AM UTC

Hi It should be noted that this extension has not been built, packaged, and tested by us yet, which is why it is not on our BApp Store. We are still in the process of approving this extension. Should you wish to continue, here is a link that details how to install a Jython extension: https://portswigger.net/burp/documentation/desktop/extensions/installing-extensions

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.