leoid/burp2slack

Push notifications to Slack channel or to custom server based on BurpSuite response conditions.

---

Burp to Slack

---

Push notifications to Slack channel or to custom server based on BurpSuite response conditions.

Burp to Slack

Burp2Slack extension matches all BurpSuite traffics (Intruder, Repeater, Proxy and Scanner) based on "any" of the user input conditions such as,

• If the input string exists in the response body
• If the input string exists in the response headers
• If the response content-length is (equal, greater than, less than or doesn't equal) the user input content length
• If the input status code matches the response one.

When one of the above conditions met, then it pushes a notification to either a Slack channel or Custom server. The notification message is customized and can be edited/formatted by the user to get the met "condition/s" and/or the HTTP response body that includes the conditions.

Main Features

• Poll Notifications every X seconds.
• Customize your notification using {{FOUND}} which is your input condition and {{BODY}} which returns response body.
• Match response body, HTTP headers, content length and HTTP status code.
• Use the logical operators !, =, < and > in the content length field.
• Support both Slack webhook and custom HTTP listeners.
• Match Burp proxy, Repeater, Intruder and Scanner/Spider.

Build the Project

Use the following command to build the Jar file.

mvn clean install

TODO:

 - [ ] BurpCollaborator to Slack
 - [ ] Match more options 

Bugs / Feedback / PRs

Any comment, issue or pull request will be highly appreciated :)

Author

b1twis3 - https://twitter.com/fasthm00

burp2slack's Issues

[Suggestion] Add Telegram/Discord bot support

I suggest expanding the usability range, although I think this could be for another tool, I find that it would be very useful to have the options available for both Telegram and Discord given the large number of people/communities that currently occupy these applications.

Note: There was a time when I tried to do it for telegram, but Java beat me :(.

which version of java required to use this extension ...giving error

giviing error while loading extension ...asking later versiono of java

Suggestion: monitor new issues

Hi! I like the concept of this extension. I think a very useful feature could be of monitoring the activity of new issues discovered in the Target and sending a notification on Slack where certain conditions are met, example: only send critical issue or high issue with certain confidence.

Cheers