Burp Extensions

A collection of scripts to extend Burp Suite. Most are just sample scripts that interact with Burp in a particular way, mainly to demonstrate how to interact with Burp. The code is commented well enough (hopefully!) to follow, or I have written a blog post that explains the code in detail.

Step-by-step tutorials to write Python extensions:

https://laconicwolf.com/2019/03/09/burp-extension-python-tutorial-generate-a-forced-browsing-wordlist/ https://laconicwolf.com/2019/02/07/burp-extension-python-tutorial-encode-decode-hash/ https://laconicwolf.com/2018/04/13/burp-extension-python-tutorial/

Extensions

InjectMate.py

Multi-tabbed extension that helps generate payloads for various purposes (XSS, SQLi, Header injection, and more). Includes intergration with Collaborator to discover OOB and blind issues. Allows for payload customization and has multiple options for encoding and that could help with WAF bypass. XSS payloads that get generated may not all be valid (some event handlers may not work with the specific tag). SQLi payloads are taken from SQLMap and sorted by DBMS and technique (my implementation of this may not be perfect, and it is probably just better to just run SQLMap). Of course, suggestions are welcome.

GenerateParameterWordlist.py

Extracts the parameters from URLs in scope or from a selected host. Just right click on the hosts pane in the sitemap and click 'Generate parameter wordlist' for either selected items or all hosts in scope. The output will be copied to the clipboard and will appear in the extender tab, where you can set configure the extension to output to the system console, save to a file, or show in the UI.

GenerateForcedBrowseWordlist.py

Extracts the filenames from URLs in scope or from a selected host. Just right click on the hosts pane in the sitemap and click 'Generate forced browsing wordlist' for either selected items or all hosts in scope. The output will appear in the extender tab, where you can set configure the extension to output to the system console, save to a file, or show in the UI.

ExampleRepeater.py

Like repeater, only without any of the features, bug checking, or elegance. A simple example that creates a tab with a split-panel GUI, where the top pane can be populated (By right-clicking and 'Send to ...' or just typing it) with an HTTP request. It implements a button, that when clicked, sends the HTTP request and writes the response to the bottom pane.

RequestAsPython-PowerShell.py

Once again, extensions already exist for this, but is an example of a tab with a split panel GUI. Top pane is for an HTTP request, and the bottom pane contains a button and three text fields. Click the button, and the request gets transformed to its equivalent in Python requests, Python urllib2, and PowerShell Invoke-WebRequest. Not all methods and use cases were tested, but seems to work okay.

EncodeDecodeHash.py

Performs encoding, decoding, and hashing similar to ZAP's encode/decode/hash tool. The extension encodeDecodeHash.py is only here for training purposes, as it is used in a tutorial. EncodeDecodeHash.py has some GUI improvements (scroll panes, line wrap) and performance improvements (multithreading), so if you are going to use it, be sure to use EncodeDecodeHash and not encodeDecodeHash.