Giter Site home page Giter Site logo

artssec / burp-exporter Goto Github PK

View Code? Open in Web Editor NEW
170.0 5.0 36.0 636 KB

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

Home Page: https://www.artssec.com

License: Apache License 2.0

Python 100.00%
burpsuite burp-extensions security-tools exporter python bappstore

burp-exporter's People

Contributors

andresesfm avatar artssec avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

burp-exporter's Issues

Error when header value contains colon

Burp Suite Version:
v2020.9.2 Communuty Edition
Description:
When trying to export a request that contains headers with ":" in the body, there's an exception thrown complaining about attempting to create a dict with more than the expected two elements per subarray
Steps or PoCs:

HTTP(s) Requests/Responses:
MY_HEADER: {"param":"val"}
Screenshots:

The following PR fixes the issue and cleans up duplicate code to convert headers to a new dict: #3

lost '\' when copy as python requests

Burp Suite Version:
4:22 am 2020.11.20
Description:
lost '\' when copy as python requests
Steps or PoCs:

HTTP(s) Requests/Responses:

Screenshots:
image

Multiple code fixes, Code was tested

This is the code address:
Exporter-20201219-modify.txt

First of all, I'm sorry That I don't use Git, so I can only send you the modified source code in text
Add HTTPS support to all generated scripts and fix some syntax errors. except for javascript module errors
Here are some of the changes:
python requests https error has been fixed
Golang Native HTTPS and syntax errors have been fixed
Powershell HTTPS and syntax errors have been fixed
Perl LWP HTTPS and cookie string cutting errors have been fixed
The NodeJS HTTPS error has been fixed
php http_request2 HTTPS error has been fixed
jquery ajax by module generated code was not usable, but I did not fix it

Other issues:
Support for other POST request formats is not particularly friendly, such as json format not being escaped

这里是代码地址:
Exporter-20201219-modify.txt
首先,很抱歉,我不会使用git,所以我只能用文本的方法发送修改好的源码给您
给所有生成的脚本添加HTTPS支持,并修复部分语法错误。 除了javascript模块的错误
以下是一些变化:
python requests https错误 已修复
Golang Native HTTPS和语法错误 已修复
Powershell HTTPS和语法错误 已修复
Perl LWP HTTPS和cookie字符串切割错误 已修复
NodeJS HTTPS错误 已修复
php http_request2 HTTPS错误 已修复
jquery ajax 模块生成的代码不能用,但我没有修复它
其他问题:
对于其他的post请求格式支持不是特别友好,例如json格式没有被转义

Copy As fetch

What would you like to improve or add?

What about a copy as fetch in addition to XHR?

Possible HTTP(s) Requests/Responses:

await fetch("https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API/Using_Fetch", {
    "credentials": "include",
    "headers": {
        "User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0",
        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
        "Accept-Language": "en-US,en;q=0.5",
        "Upgrade-Insecure-Requests": "1",
        "Sec-Fetch-Dest": "document",
        "Sec-Fetch-Mode": "navigate",
        "Sec-Fetch-Site": "none",
        "Sec-Fetch-User": "?1"
    },
    "method": "GET",
    "mode": "cors"
});
await fetch("https://login.wordpress.org/wp-login.php", {
    "credentials": "include",
    "headers": {
        "User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:99.0) Gecko/20100101 Firefox/99.0",
        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
        "Accept-Language": "en-US,en;q=0.5",
        "Content-Type": "application/x-www-form-urlencoded",
        "Upgrade-Insecure-Requests": "1",
        "Sec-Fetch-Dest": "document",
        "Sec-Fetch-Mode": "navigate",
        "Sec-Fetch-Site": "same-origin",
        "Sec-Fetch-User": "?1"
    },
    "referrer": "https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2F&locale=en_US",
    "body": "log=admin&pwd=password123&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fwordpress.org%2F&_reCaptcha_v3_token=03ANYolqumvyfe38jHcqCPI_6IS0mGikxLDyEysok411e0rNZh1MxvHH4bGMX2q1NqSf09W07pU0wJ_74cC69fh9hihveIkFeCegA9rlbX2GfgMcN9aJWlWrIXclmOUe8FiM0rdMc7616MavxlLbiaX9HQZ3BbSbMAuiDBGRDVhBvxGkBR5nyTkhrCHRRh980MeOj8WTYPuStfqItd-UR6ZBh1NuZAOOZHVbJLy6d5Zjg80F0qVxuWpkwsHItbOU_czvSkd_6wzwlAwBk-LjYCa4qAQ06_msjlWgSVV5ZETKHInknZza1LEQG9Co3-NmCe45Duz5QxbRAy7NHdiwzQmV7d3_sfbtGWkx6pVW664s3Ef9jZWWZ84i5CnbEk0RwfekWtHc03WzYoR2LNb00aPmwAQa4rGPKY_UUDabiJxeuytgJCEIhkG2IBopgmPrJ97Vyc_vx4ws_leC0EzAoyHdkDKhR3033e9DXiY01dFuuToiqOsIhWlhLmHpajTYiWvOAPu2zrQ4B1ICp84Pml22T4gUTXJpNF9TWpkdtf-hqyM2nAtHEExKBitpk6XzUffJFCuaByVVINicmxuJ9yGHF15JJSNQjI2g",
    "method": "POST",
    "mode": "cors"
});

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.