Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

System.exit() kills Burp

august Jun 25, 2019 09:38PM UTC

I'm building an extension that will call a Java command line program from within Burp (by calling the main() method). Unfortunately, when the command line tool finishes, it calls System.exit(0); which doesn't just kill the CLI, it also kills Burp entirely. Is there a way to prevent this in Burp?

As a side question, when extensions are submitted to the BApp Store do you check for things like malicious calls to System.exit()?

Paul Johnston Jun 26, 2019 10:40AM UTC Support Center agent

There’s no way to disable System.exit(). I suggest you edit the code from the program you’re running and remove the call to System.exit(). Alternatively, using Runtime.exec to run the tool in a separate process.

We do check extensions for a number of suspicious calls – including System.exe – before allowing them in the BApp Store.

Post Your public answer

Your name
Your email address