Skip to content

Instantly share code, notes, and snippets.

View pajswigger's full-sized avatar

Paul Johnston pajswigger

128 followers · 0 following
View GitHub Profile
@pajswigger
pajswigger / delete-cookies.kt
Created April 18, 2019 10:40
Burp extension to delete all cookies in jar
package burp
class BurpExtender: IBurpExtender {
override fun registerExtenderCallbacks(callbacks: IBurpExtenderCallbacks) {
for (cookie in callbacks.cookieJarContents) {
callbacks.printOutput("${cookie.domain} ${cookie.path} ${cookie.name}")
callbacks.updateCookieJar(CookieNullValue(cookie))
}
}
}
@pajswigger
pajswigger / BurpExtender.java
Created February 8, 2019 10:59
Sample Burp Extension code to extract response markers
package burp;
import java.util.List;
public class BurpExtender implements IBurpExtender
{
@Override
public void registerExtenderCallbacks(IBurpExtenderCallbacks callbacks)
{
@pajswigger
pajswigger / burp-summary-report.xsl
Created October 10, 2018 08:58
XSLT file to generate a summary HTML report from a Burp XML report
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="html" indent="no"/>
<xsl:key name="issue-by-type" match="issue" use="type" />
<xsl:template match="/issues">
<html>
<head>
<title>Burp Scanner Report</title>
@pajswigger
pajswigger / UpdateParameter.java
Created September 20, 2018 09:47
Function to help a Burp extension update a parameter
static byte[] updateParameter(IExtensionHelpers helpers, IRequestInfo requestInfo, byte[] request, IParameter parameter, String value) {
ByteArrayOutputStream baos = new ByteArrayOutputStream();
int bodyOffset = requestInfo.getBodyOffset();
baos.write(request, bodyOffset, parameter.getValueStart() - bodyOffset);
baos.write(value.getBytes(Charsets.ISO_8859_1), 0, value.length());
baos.write(request, parameter.getValueEnd(), request.length - parameter.getValueEnd());
byte[] newBody = baos.toByteArray();
List<String> headers = requestInfo.getHeaders();
for(int i = 0; i < headers.size(); i++) {
@pajswigger
pajswigger / crlf-fixup.py
Created July 3, 2018 13:30
from burp import IBurpExtender, IHttpListener
class BurpExtender(IBurpExtender, IHttpListener):
def registerExtenderCallbacks(self, callbacks):
self.callbacks = callbacks
callbacks.registerHttpListener(self)
def processHttpMessage(self, toolFlag, messageIsRequest, message):
helpers = self.callbacks.getHelpers()
@pajswigger
pajswigger / burp-report.xsl
Created July 2, 2018 13:34
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="html" indent="no"/>
<xsl:key name="issue-by-type" match="issue" use="type" />
<xsl:template match="/issues">
<html>
<head>
<title>Burp Scanner Report</title>
@pajswigger
pajswigger / license-burp.py
Created April 30, 2018 12:36
import sys, pexpect.popen_spawn, signal
if len(sys.argv) != 3:
print('Usage: license-burp [yes/no] [license-file]')
sys.exit(1)
if sys.argv[1] != 'yes':
print('You must accept the license to use Burp')
sys.exit(1)
@pajswigger
pajswigger / getBurpFrame.java
Created April 24, 2018 11:26
static JFrame getBurpFrame()
{
for(Frame f : Frame.getFrames())
{
if(f.isVisible() && f.getTitle().startsWith(("Burp Suite")))
{
return (JFrame) f;
}
}
return null;
@pajswigger
pajswigger / add-cvss-to-report.py
Created April 19, 2018 10:35
import sys
out = []
in_summary = False
with open(sys.argv[1]) as input:
for line in input:
if line.startswith('<table cellpadding="0" cellspacing="0" class="summary_table">'):
in_summary = True
if in_summary:
line = line.replace('rowspan="4"', 'rowspan="6"')
@pajswigger
pajswigger / intruder-pause.py
Created April 19, 2018 09:50
from burp import IBurpExtender, IHttpListener
import threading, time
class BurpExtender(IBurpExtender, IHttpListener):
count = 0
lock = threading.Lock()
def registerExtenderCallbacks(self, callbacks):
self.callbacks = callbacks