righettod/burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

burp-piper-custom-scripts's Issues

Feature: Detection of MAP files for SPA main JS bundle

Describe the feature wanted

Add detection of the map file in the script extract-spa-low-hanging-fruits.py:

//...
//# sourceMappingURL=main.dqfcf86f.chunk.js.map

New script to detect UUID v1 in a HTTP response

Based on the following articles:

• https://versprite.com/blog/universally-unique-identifiers/
• https://web.archive.org/web/20160305114945/http:/crypto-world.com/uuid/search_uuid.txt
• https://blog.silentsignal.eu/2017/02/17/not-so-unique-snowflakes/

Create a Message viewers script that will identify every UUID v1 in a HTTP response body and extract the info about every UUID found.

Feature: Add support for Vue.js framework

Describe the feature wanted

Add the dangerous patterns for the Vue.js framework in the script extract-spa-unsafe-patterns.py.

Feature: Extract Blazor assemblies location for download

Create a script of Message viewer type that extract the collection of assemblies used by a Blazor app and indicated in this exchange.

Request

GET /_framework/blazor.boot.json HTTP/2
Host: xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Pragma: no-cache
Cache-Control: no-cache
Te: trailers
Connection: close

Response

HTTP/2 200 OK
Cache-Control: no-cache
Date: Fri, 15 Jan 2021 18:05:21 GMT
Content-Type: application/json
Last-Modified: Fri, 30 Oct 2020 17:49:39 GMT
Accept-Ranges: bytes
Etag: "1d6aee509d973e3"
Server: Kestrel
Vary: Content-Encoding
Content-Length: 4387
Blazor-Environment: Production

{
  "cacheBootResources": true,
  "config": [
    "appsettings.json"
  ],
  "debugBuild": false,
  "entryAssembly": "BlazorWithIdentity.Client",
  "linkerEnabled": true,
  "resources": {
    "assembly": {
      "BlazorWithIdentity.Client.dll": "sha256-Z2lEbzKo0SAOltnnXTs4S\/agx6tyTImPnBFWGXHc52Y=",
      "BlazorWithIdentity.Shared.dll": "sha256-ik9aZdyB6CorzAkiecKOyj0O4VDaJkR7otYB2iY2kfk=",
      "Google.Protobuf.dll": "sha256-GuzwaNy8IfOdRVA5O07oem30gUDQ7eQjbmftykOJsxY=",
      "Grpc.Core.Api.dll": "sha256-2ZHJEZ3vySpPHBExkcdKxDCnnb1a8quT3vWYH+Dd7Pk=",
      "Grpc.Net.Client.dll": "sha256-qVftmkL2+Qgwwf2PXanBUD0G8thridbHZn9raN5DBys=",
      "Grpc.Net.Client.Web.dll": "sha256-Csu\/IzjDjtaByhDPI8OF5GcYNe+ZEd9QD46PjRefgK8=",
      "Grpc.Net.Common.dll": "sha256-H1wirdO4+Hro1KENObyLLxx03cJvOt0cVbAGTlntOcE=",
      "Microsoft.AspNetCore.Authorization.dll": "sha256-\/q6kGb7yZvRMGcL6zOYKPNEH46cYWIpsjLKM++DBN9U=",
      "Microsoft.AspNetCore.Components.Authorization.dll": "sha256-Orxwc2Y0dTsD+Fv6TygBBfy8zI+ymUQtpXhwmfJERFY=",
      "Microsoft.AspNetCore.Components.dll": "sha256-IyigWcZ+vKebognbdmHnmcZFuiI0q9e+QBrijeuPnFk=",
      "Microsoft.AspNetCore.Components.Forms.dll": "sha256-duy1J6Uv\/JsUavXaF77\/DttL6GpZqJSLi6+mizT\/uwA=",
      "Microsoft.AspNetCore.Components.Web.dll": "sha256-1hAKZ5UTNPEFmOx6Sh7x9lm\/rydq\/rcVo2YEsirfQF0=",
      "Microsoft.AspNetCore.Components.WebAssembly.dll": "sha256-q3Sv8UM1wgfUD201JnpRjqDFIBdTv48TqCDNPy0LH4o=",
      "Microsoft.AspNetCore.Metadata.dll": "sha256-zMw2dpCz0o+GQqEh4gBt283OSDlvY6lJfm4H3FdVOGw=",
      "Microsoft.Bcl.AsyncInterfaces.dll": "sha256-jzHgXWAvWMkKIGFjZoT84tbe72E+H7CvTr\/Dryh4QPs=",
      "Microsoft.Extensions.Configuration.Abstractions.dll": "sha256-nRubUtYjR4O+x6\/MGb4+9tzXpnQh+9G4632Ea67+IE8=",
      "Microsoft.Extensions.Configuration.dll": "sha256-Sar1BOWHF67DgSc9Foxkd+WJRYjqUuTVlITul0GVjcc=",
      "Microsoft.Extensions.Configuration.Json.dll": "sha256-7cLAlpMwFwgMutK3aBKX+RCmuIUbNvss6daiTT1oKkU=",
      "Microsoft.Extensions.DependencyInjection.Abstractions.dll": "sha256-zBz3KdmM6evpHWky5s6odn+YeZJavcJBPmOymoriAIQ=",
      "Microsoft.Extensions.DependencyInjection.dll": "sha256-UX5p8q9WmAQxFYsvheI3DICNM2yGWtC+61IrPVmDtKA=",
      "Microsoft.Extensions.Logging.Abstractions.dll": "sha256-um4xnxdUUZ2OC20WMo\/igpqg5Sbam\/\/t4kc+jiDSbzQ=",
      "Microsoft.Extensions.Logging.dll": "sha256-Efrs1+dKciQ6cz7lomes7+pGwsf3fGevKmjnfAZh6O8=",
      "Microsoft.Extensions.Options.dll": "sha256-BtaMPfrpyjEao\/lC2+nwow4NleFWHCg\/\/NYeK9z+0yE=",
      "Microsoft.Extensions.Primitives.dll": "sha256-HjrG833QHmJjvnOZ1\/gsibHRRM\/nzf0s7EGAiLMmTIU=",
      "Microsoft.JSInterop.dll": "sha256-GFqkJmxwbf7WMrZ+MCRzaOADzSsVQ9tcMrMt19fsEeo=",
      "Microsoft.JSInterop.WebAssembly.dll": "sha256-UZa5CS19ZrbM6Csnl8CUIQucvmKMc4TughggTxKhx\/I=",
      "Mono.Security.dll": "sha256-ikIV2o0O8C+KqZyIBgrg1AhWi6slnrAE11LRFGHHq3Q=",
      "mscorlib.dll": "sha256-fI3t6vUsYjGIQOIspfrzn1AAMn+KQ4AnM2uxEkRoxrY=",
      "System.ComponentModel.DataAnnotations.dll": "sha256-Z3CvBRw5wh27jYj3AuqnWErilGNmA2P8E26ry65eAas=",
      "System.Core.dll": "sha256-kKCI9UpaUNUusslgagUy6AU7bkdHn\/fh8EVZxLmRgeU=",
      "System.Diagnostics.DiagnosticSource.dll": "sha256-4R+HkDmALWb1BMPgQYPwUq5jL92TzV3Qsd8HwQ43j9o=",
      "System.dll": "sha256-5wjcQbAyP0chC1kgYSr5I999\/kmdEXa8aw9BoyHy+ok=",
      "System.Net.Http.dll": "sha256-uT35V9CevHzBz6TtKFgqH3OQKy3kdR5OXVKl3ToYwyY=",
      "System.Net.Http.Json.dll": "sha256-2sqV\/11U+nVgFKlib2XOqHr43n7QA4cYHTUhoyrrkzA=",
      "System.Net.Http.WebAssemblyHttpHandler.dll": "sha256-hd1dCRyJHXCJCapAMVres+w7aW3FFSfRfHPYwLlcxK0=",
      "System.Runtime.CompilerServices.Unsafe.dll": "sha256-Em+49zPqogpeAhaz66kFrF+NyUYsQ+UQ4WXu9dv15PM=",
      "System.Text.Encodings.Web.dll": "sha256-u2\/+yhJcv4Qg7BOJIoJoA9OQPSZRFqzMbS4ZjiSDaaI=",
      "System.Text.Json.dll": "sha256-bF1LPxex6H2KlLu1imyzLFe\/Xo7+WrKjEwN4q0DQtpY=",
      "WebAssembly.Bindings.dll": "sha256-Bo2zdt9O1E82yMK8QiT\/2r0zNnOJsBxVB9SJC4OlrSI="
    },
    "pdb": null,
    "runtime": {
      "dotnet.3.2.0.js": "sha256-mPoqx7XczFHBWk3gRNn0hc9ekG1OvkKY4XiKRY5Mj5U=",
      "dotnet.timezones.dat": "sha256-3S0qzYaBEKOBXarzVLNzNAFXlwJr6nI3lFlYUpQTPH8=",
      "dotnet.wasm": "sha256-UC\/3Rm1NkdNdlIrzYARo+dO\/HDlS5mhPxo0IQv7kma8="
    },
    "satelliteResources": null
  }
}

Assemblies files are hosted in folder [HOST]/[CTX_ROOT]/_framework/_bin/[FILE].dll

The script should generate the code using curl (present on Windows via PowerShell and by default on Linux) to download all the assemblies by only changing a variable to specify the base url because it not available in the HTTP response.

The script must only be usable if the HTTP response header Blazor-Environment: [\w\d]+ is present.

Curl command template:

$ curl https://$host/_framework/_bin/BlazorWithIdentity.Client.dll --output  BlazorWithIdentity.Client.dll