Tuesday, August 7, 2012

Setting up the Extended framework

I'm going to quickly go over how to get the Burp Suite Extended framework up and running.

First, you'll need to go download it from our github. I would recommend downloading the entire repository as a zip, it has everything that you need, excluding a copy of burp suite. Extract it, to wherever you would like, then add a copy of the Burp Suite Pro jar. The current scripts will look for 'burp.jar', you can simply modify them or rename your jar. That's pretty much it. In a windows environment just double click the burp_extended.bat and osx/nix sh burp_extended.sh.

Now that you're up and running you'll notice a new convenient GUI window for your extensions. All extensions will be able to give output and add settings/gui options to this window... but do not close it, because it will also close burp upon doing so.

You'll notice a list on the left, these are all extensions that have been loaded that may have custom options or print output to a log tab. When you select a specific extension, the right pane of the gui will then be populated by that extensions features and options (if applicable). You'll also notice some new menuitems if you right click on any items inside of the Burp GUI.

Important things to remember:
  • All extensions are within scope. If it is not working make sure that you're working within scope.
  • You need to make sure the request has actually been made and a response has been gathered before you can call an extension to it. e.g. If it's greyed out.


No comments:

Post a Comment