Burp Extensions

Make a new post

  • Extension Not Loading Due to "Stale" Reference

    So I noticed the following behavior when using the Python Scripter extension: 1. Installed the extension 2. Added custom script containing error in Scripter tab 3. Closed Burp 4. Relaunched Burp and noticed the extension would no longer load as it was still referencing the script from 2. 5. Removed/reinstalled the extension, but it still referenced the script from 2 Because the extension...

    2 Agent Answers    1 Community Answer
    Sep 28, 2017 02:42AM UTC
  • Burp Carbonator does not work for me

    I am trying to play around with the carbonator feature of Burp using the demo.testfire application as a test run and had a few questions and issues. Issues: I have installed carbonator and using the command " java -jar <path to burp> http://demo.testfire.net/bank/login.aspx 80". However, this just opens the Burp instance and does not do anything. Is there anything that I am mis...

    3 Agent Answers    3 Community Answers
    Sep 21, 2017 06:47PM UTC
  • Project Configuration Changes Aren't Picked Up During Current IHttpListener.processHttpMessage ...

    (Burp: 1.7.27, OS: macOS 10.12, Java: 8) Given an IBurpExtender that registers an IHttpListener when the listener's IHttpListener.processHttpMessage is called, and the message is a request, it calls IBurpExtenderCallbacks.saveConfigAsJson("project_options.connections.upstream_proxy") to dump the current project-level configuration for Upstream proxies. If applicable, the current ...

    3 Agent Answers    2 Community Answers
    Sep 21, 2017 02:37PM UTC
  • Associating an outgoing request with its response

    Hey, Is there an easy way to associate a request going through the processHttpMessage of a registered IHttpListener with the response that comes back later? Thanks, Justin

    1 Agent Answer    1 Community Answer
    Sep 19, 2017 01:21AM UTC
  • [python] adding a custom header and send JSON in post request.

    Hello team I wanted to know how to add custom header and send JSON in post request in jython. here is my basic code def sendRequest(self,data): host="requestb.in" url=URL("https://requestb.in/q6v4xrq6") req=self._helpers.buildHttpRequest(url) encode=self._helpers.urlEncode(data) body=self._helpers.buildParameter("body", encode, IParamete...

    1 Agent Answer    0 Community Answer
    Sep 17, 2017 07:28PM UTC
  • Extension resource loading

    I've embedded some static files inside the extension, in the folder named `assets`. Trying to access them fails, using following code: InputStream in = DataUtils.class.getClassLoader().getResourceAsStream("/assets/" + filename); Maybe it fails because "/" refers to root of `burp.jar`, not my `ext.jar`. How can I access the assets?

    1 Agent Answer    1 Community Answer
    Sep 10, 2017 04:35AM UTC
  • Highlighting a tab in JTabbedPane of an extension

    Hi, I am working on an extension that has its own JTabbedPane. I am trying to highlight a tab in my extension's JTabbedPane but for some reason the call to setBackgroundAt() simply does nothing. Oddly enough I am able to walk up the chain of components to Burp's JTabbedPane and highlight the main tab of my extension just fine using the same method. Within Burp Suite this situation...

    5 Agent Answers    6 Community Answers
    Sep 01, 2017 04:37PM UTC
  • bug report for ruby extension file upload traverser

    bug report in ruby extension two different report platform java java.lang.RuntimeException: BUG: could not initialize constructor handle at org.jruby.runtime.scope.ManyVarsDynamicScope.<clinit>(ManyVarsDynamicScope.java:39) at org.jruby.runtime.ThreadContext.<init>(ThreadContext.java:214) at org.jruby.runtime.ThreadContext.newContext(ThreadContext.java:85) at org.jruby.inter...

    1 Agent Answer    0 Community Answer
    Sep 01, 2017 03:01PM UTC
  • Burp main jframe

    Where can I access a reference to Burp's main JFrame? It's required for displaying JDialogs relative to it.

    2 Agent Answers    1 Community Answer
    Aug 24, 2017 01:25PM UTC
  • Autoscan Insertion points

    I am trying to make an extension for burp that provides request and insertion points for scan via command line. I can perform scan on the request with default insertion points of that is by not passing anything for the insertion pint argument in doAutoScan function. But I want to be able to provide my own insertion points. Could anyone guide me with the same. I wanna know the type of data structur...

    1 Agent Answer    0 Community Answer
    Aug 09, 2017 05:45PM UTC