Burp Suite User Forum

Login to post

SQLiPy fails to load after upgrade to v2.0.14beta

| Last updated: Jan 24, 2019 01:39AM UTC

After upgrading to BurpSuite v2.0.13beta the SQLiPY extension fails to load with the following error: ImportError: signal module requires sun.misc.Signal, which is not available on this platform After rolling back to v2.0.13beta SQLiPY extension is able to be loaded again.

PortSwigger Agent | Last updated: Jan 24, 2019 11:59AM UTC

This will be fixed in the next beta release of Burp. In the meantime, Seth's workaround is great!

Burp User | Last updated: Jan 24, 2019 05:46PM UTC

I think this is happening because the bundled Burp JRE has been updated to Java 11. JDK 9 encapsulated sun.misc.Signal (and other stuff) inside the 'jdk.unsupported' module and my guess is something is going wonky with the class/module loading. Interestingly enough if I launch Burp using my own JDK 11 instead of using the bundled Java 11 JRE and I launch Burp using 'java -jar <path to Burp jar>' I can load the extension just fine. JAVA_HOME is set to my own JDK 11 and here is the output of 'java -version': openjdk version "11.0.1" 2018-10-16 OpenJDK Runtime Environment 18.9 (build 11.0.1+13) OpenJDK 64-Bit Server VM 18.9 (build 11.0.1+13, mixed mode) Bundled JRE 'java -version': openjdk version "11.0.1" 2018-10-16 OpenJDK Runtime Environment 18.9 (build 11.0.1+13) OpenJDK 64-Bit Server VM 18.9 (build 11.0.1+13, mixed mode)

Burp User | Last updated: Jan 24, 2019 06:01PM UTC

So I figured out why this is happening. The default JDK download from Oracle contains more modules than the bundled JRE does. You can list the modules with --show-module-resolution when launching Burp from the jar. Basically the bundled JRE doesn't ship with the jdk.unsupported module so the class fails to load.

Burp User | Last updated: Jan 25, 2019 12:14AM UTC

Thanks Seth, I'll try running with the JDK.

Burp User | Last updated: Jan 28, 2019 11:44AM UTC

Can it be fixed in future releases of burp ?

You need to Log in to post a reply. Or register here, for free.