Get local path of burp file via API
I'm looking to be able to save information to the same directory as my Burp project file through a Burp Extension. I organize my project files in folders with respect to the applications I'm testing....
View ArticleWebSocket API
I'm dealing more and more with websockets: is there _any_ way to modify requests on the fly? I'm not afraid of writing a custom extension or fiddle with scripting my own tools. FWIW, if you provide...
View ArticleHighlighting in IMessageEditor
Hello, I am trying to create an extension in which you can highlight single or multiple lines of text in the request or response tabs. I am having an issue when you add a “Graphic” to the...
View ArticleBurp Enterprise Edition/Pro Edition can be integrated with Microsoft Team...
Hi Burp Team, Currently we are evaluating the trial version of Burp Enterprise edition tool for security testing in our organization. The requirement is to integrate Burp Enterprise Edition/Pro Edition...
View Articleคุณได้ชำระเงินจำนวน $399.00 USD ให้ PortSwigger Ltd (mail@portswigger.net)
08 ม.ค. 2019 01:09:36 GMT+07:00 ID การทำรายการ: 9FC40466TM976523J สวัสดีค่ะ คุณ ayut intasut คุณได้ชำระเงินจำนวน $399.00 USD ให้ PortSwigger Ltd (mail@portswigger.net)...
View ArticleAccess command line through Burp extension
As per the subject, I was wondering if it is possible to access the command line (either windows or linux) through a Burp extension.
View ArticleScope manipulation API
Methods IBurpExtenderCallbacks.{includeIn,excludeFrom}Scope make it possible to add/remove a specific URL to/from the scope. Is there a way to use these or any other API call to perform actions like...
View ArticleHandle IInterceptedProxyMessage BEFORE it's sent to the server?
This is my first attempt at writing an extension. I would like to intercept certain requests, inspect them, and handle SOME of them BEFORE they are sent to the remote server. In other words, for...
View ArticleSQLiPy fails to load after upgrade to v2.0.14beta
After upgrading to BurpSuite v2.0.13beta the SQLiPY extension fails to load with the following error: ImportError: signal module requires sun.misc.Signal, which is not available on this platform After...
View ArticleBurp scanner insertion point custom encoding
I'm trying to create an extension for scanner to specify multiple insertion points and also do some custom encoding on the payload from scanner. I'm attempting to use the following example along with...
View Articlewhen I install a python extender(burpsmartbuster), it points out that "failed...
I have already install jython.jar file(2.7,the file has been selected in options) and python(but i have two versions of python and both of them is system variables) the error messages is here:...
View ArticleExtender Not Displaying Plugins / Can't Refresh
I am behind a corporate proxy environment using Ubuntu. Using the corporate proxy settings I am able to use Firefox to view websites as expected so Burpsuite should be able to display the BApp Store...
View ArticleSAML Raider "failureInInitialization" with BurpSuite 2.0.16 beta
Normally, the SAML Raider extension will populate a SAML Raider tab when you select a SAML request in the HTTP History. Now, instead of populating the tab, it simply says "failureInInitialization"....
View ArticleBurp 2.x: Create authenticated crawl from extension
Hi Portswigger Support! I'm interested in using an extension (in headless mode) to spawn an authenticated crawl while using the 2.x versions of Burp Suite Professional. In the 1.x versions, I would...
View ArticleAuditing not calling doActiveScan(...) method via Extensibility API
Hi folks, I am currently trying to learn the Burp Extensibility API using this example (in Java); https://github.com/PortSwigger/example-scanner-checks and getting stuck with something. With latest...
View ArticleOpenAPI Parser
I am not able to get the OpenAPI Parser to work. I keep getting an error message saying that "The OpenAPI specification contained in is ill formed and cannot be parsed". However, the very same file can...
View ArticleWhat class/parameter makes the extensions be part of the scanner "Follow...
Hi guys, I have an extension here and I am looking for a reflective value, although when I look at flow or logger++ the 302 is hit but never followed after the POST. Is there a special trick to have...
View Articlehow to pass a file with URLS to SSLScanner
Hi fellow Burp suite users, I am using the SSL Scanner extension with Burp Suite and I wander if anyone has a script that can read a list of URLs from a file and then pass one item at a time to the SSL...
View ArticleIssue in loading jython files to burp
hello, I am seeing errors when I try to load burp extensions jython format, below is the error I see: java.lang.Exception: Failed to load Python interpreter from Jython JAR file at burp.cs3.(Unknown...
View Article