z2p/sweetpotato

基于burpsuite的资产分析工具

免责声明

该工具仅用于安全自查检测
由于传播、利用此工具所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。
本人拥有对此工具的修改和解释权。未经网络安全部门及相关部门允许，不得善自使用本工具进行任何攻击活动，不得以任何方式将其用于商业目的。

简介

平时积累的一些攻防经验想做成自动化去提升在公司项目以及外部SRC效果，故闲暇时间开发了这款基于burpsuite的工具。
过去在内部使用效果也还可以，现在工作原因不再参与红队类的业务了，将其开源供大家学习分享，过程中大家有发现任何问题和需求，欢迎提交，我会在空余时间进行优化。
主要集合了以下几个类别的功能：

1. 资产收集管理的概念，用户可设置域名，插件会随着被动流量进行分析，提取属于目标的域名资产，并会对资产递归访问，快速发现更多业务
2. 被动检测能力：基于代理过去的流量进行分析，尝试提取可疑脆弱点（插件不会发包）
3. 主动检测能力：基于代理过去的流量，然后进行二次加工（插件会额外发包）
4. 提供全局配置管理的界面，可选择对流量以及上述（2）（3）的功能进行配置
5. 当然还提供一些蛮多细小功能，就供大家琢磨了

说明

最近开通了个人blog，针对这个工具的实现和内容细节，我都放在blog上，未来这里只会记录更新日志，具体blog链接在此 🔗

功能演示

核心只演示资产收集管理的功能，其他功能大家可以慢慢体验

安装方法

1. 使用idea将源代码进行编译安装 或者 直接用release中提供编译好的文件
2. 编译完成后，在jar同目录下将resources目录放在同级，jar在burpsuite启动时，会去加载对应的配置文件进行使用

注意事项

1. 新版本的bp需要在首页关闭忽略重复访问检测的功能，否则会影响实际效果

参考

1. 部分公共代码（如：iconhash计算）参考了项目 https://github.com/bit4woo/domain_hunter_pro

赞赏

创作和开源不易，如果工具帮助到了你，可以打赏一下以资鼓励:)

star趋势

sweetpotato's Issues

添加项目出错

新版的burp爆错

使用新版本burp：2023.11.3

at burp.Ztek.ZS(Unknown Source)
at burp.Zvdk.ZE(Unknown Source)
at burp.Zc_m.Za(Unknown Source)
at burp.Zxbp.Zn(Unknown Source)
at burp.Zxbp.Zt(Unknown Source)
at burp.Zxbp.ZI(Unknown Source)
at burp.Zimg.ZI(Unknown Source)
at burp.Zz8a.ZI(Unknown Source)
at burp.Zie8.ZI(Unknown Source)
at burp.Zj5z.ZO(Unknown Source)
at burp.Zxiu.ZG(Unknown Source)
at burp.Zxin.ZG(Unknown Source)
at burp.Zcd_.ZM(Unknown Source)
at burp.Zqm.ZI(Unknown Source)
at burp.Zqm.ZJ(Unknown Source)
at burp.Zef8.ZT(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy23.sendRequest(Unknown Source)
at burp.Zd6o.makeHttpRequest(Unknown Source)
at burp.Zii9.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Ztd2.makeHttpRequest(Unknown Source)
at burp.BurpExtender.checkVul(BurpExtender.java:241)
at burp.BurpExtender$4.run(BurpExtender.java:194)
at java.base/java.lang.Thread.run(Thread.java:833)
java.lang.NullPointerException: Cannot invoke "burp.Ui.Tags.getMain2Tag()" because "this.tags" is null
at burp.BurpExtender.processHttpMessage(BurpExtender.java:103)
at burp.Zehm.handleHttpRequestToBeSent(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor33.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy24.handleHttpRequestToBeSent(Unknown Source)
at burp.Ztee.Zl(Unknown Source)
at burp.Zpzz.Zl(Unknown Source)
at burp.Ztek.Zl(Unknown Source)
at burp.Zvdk.ZK(Unknown Source)
at burp.Zxbp.Zt(Unknown Source)
at burp.Zxbp.ZI(Unknown Source)
at burp.Zimg.ZI(Unknown Source)
at burp.Zz8a.ZI(Unknown Source)
at burp.Zie8.ZI(Unknown Source)
at burp.Zj5z.ZO(Unknown Source)
at burp.Zxiu.ZG(Unknown Source)
at burp.Zxin.ZG(Unknown Source)
at burp.Zcd_.ZM(Unknown Source)
at burp.Zqm.ZI(Unknown Source)
at burp.Zqm.ZJ(Unknown Source)
at burp.Zef8.ZT(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy23.sendRequest(Unknown Source)
at burp.Zd6o.makeHttpRequest(Unknown Source)
at burp.Zii9.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Ztd2.makeHttpRequest(Unknown Source)
at burp.BurpExtender.checkVul(BurpExtender.java:241)
at burp.BurpExtender$4.run(BurpExtender.java:194)
at java.base/java.lang.Thread.run(Thread.java:833)
java.lang.NullPointerException: Cannot invoke "burp.Ui.Tags.getMain2Tag()" because "this.tags" is null
at burp.BurpExtender.processHttpMessage(BurpExtender.java:103)
at burp.Zehm.handleHttpResponseReceived(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy24.handleHttpResponseReceived(Unknown Source)
at burp.Ztee.ZS(Unknown Source)
at burp.Zpzz.ZS(Unknown Source)
at burp.Ztek.ZS(Unknown Source)
at burp.Zvdk.ZE(Unknown Source)
at burp.Zc_m.Za(Unknown Source)
at burp.Zxbp.Zn(Unknown Source)
at burp.Zxbp.Zt(Unknown Source)
at burp.Zxbp.ZI(Unknown Source)
at burp.Zimg.ZI(Unknown Source)
at burp.Zz8a.ZI(Unknown Source)
at burp.Zie8.ZI(Unknown Source)
at burp.Zj5z.ZO(Unknown Source)
at burp.Zxiu.ZG(Unknown Source)
at burp.Zxin.ZG(Unknown Source)
at burp.Zcd_.ZM(Unknown Source)
at burp.Zqm.ZI(Unknown Source)
at burp.Zqm.ZJ(Unknown Source)
at burp.Zef8.ZT(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy23.sendRequest(Unknown Source)
at burp.Zd6o.makeHttpRequest(Unknown Source)
at burp.Zii9.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Ztd2.makeHttpRequest(Unknown Source)
at burp.BurpExtender.checkVul(BurpExtender.java:241)
at burp.BurpExtender$4.run(BurpExtender.java:194)
at java.base/java.lang.Thread.run(Thread.java:833)
java.lang.NullPointerException: Cannot invoke "burp.Ui.Tags.getMain2Tag()" because "this.tags" is null
at burp.BurpExtender.processHttpMessage(BurpExtender.java:103)
at burp.Zehm.handleHttpRequestToBeSent(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor33.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy24.handleHttpRequestToBeSent(Unknown Source)
at burp.Ztee.Zl(Unknown Source)
at burp.Zpzz.Zl(Unknown Source)
at burp.Ztek.Zl(Unknown Source)
at burp.Zvdk.ZK(Unknown Source)
at burp.Zxbp.Zt(Unknown Source)
at burp.Zxbp.ZI(Unknown Source)
at burp.Zimg.ZI(Unknown Source)
at burp.Zz8a.ZI(Unknown Source)
at burp.Zie8.ZI(Unknown Source)
at burp.Zj5z.ZO(Unknown Source)
at burp.Zxiu.ZG(Unknown Source)
at burp.Zxin.ZG(Unknown Source)
at burp.Zcd_.ZM(Unknown Source)
at burp.Zqm.ZI(Unknown Source)
at burp.Zqm.ZJ(Unknown Source)
at burp.Zef8.ZT(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy23.sendRequest(Unknown Source)
at burp.Zd6o.makeHttpRequest(Unknown Source)
at burp.Zii9.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Ztd2.makeHttpRequest(Unknown Source)
at burp.BurpExtender.checkVul(BurpExtender.java:241)
at burp.BurpExtender$4.run(BurpExtender.java:194)
at java.base/java.lang.Thread.run(Thread.java:833)
java.lang.NullPointerException: Cannot invoke "burp.Ui.Tags.getMain2Tag()" because "this.tags" is null
at burp.BurpExtender.processHttpMessage(BurpExtender.java:103)
at burp.Zehm.handleHttpResponseReceived(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy24.handleHttpResponseReceived(Unknown Source)
at burp.Ztee.ZS(Unknown Source)
at burp.Zpzz.ZS(Unknown Source)
at burp.Ztek.ZS(Unknown Source)
at burp.Zvdk.ZE(Unknown Source)
at burp.Zc_m.Za(Unknown Source)
at burp.Zxbp.Zn(Unknown Source)
at burp.Zxbp.Zt(Unknown Source)
at burp.Zxbp.ZI(Unknown Source)
at burp.Zimg.ZI(Unknown Source)
at burp.Zz8a.ZI(Unknown Source)
at burp.Zie8.ZI(Unknown Source)
at burp.Zj5z.ZO(Unknown Source)
at burp.Zxiu.ZG(Unknown Source)
at burp.Zxin.ZG(Unknown Source)
at burp.Zcd_.ZM(Unknown Source)
at burp.Zqm.ZI(Unknown Source)
at burp.Zqm.ZJ(Unknown Source)
at burp.Zef8.ZT(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at burp.Zef8.sendRequest(Unknown Source)
at jdk.internal.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at burp.Zi4l.invoke(Unknown Source)
at jdk.proxy2/jdk.proxy2.$Proxy23.sendRequest(Unknown Source)
at burp.Zd6o.makeHttpRequest(Unknown Source)
at burp.Zii9.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Zmb.makeHttpRequest(Unknown Source)
at burp.Ztd2.makeHttpRequest(Unknown Source)
at burp.BurpExtender.checkVul(BurpExtender.java:241)
at burp.BurpExtender$4.run(BurpExtender.java:194)
at java.base/java.lang.Thread.run(Thread.java:833)

建议新增微信UA

平时有些目标是必须要微信客户端访问，建议UA修改这块新增一个微信客户端的UA或者UA可自定义修改。

高版本报错

线程太多，比较卡

线程太多，比较卡，建议增加线程配置的选项。

jdk1.8运行环境

希望大佬的插件能支持jdk1.8运行环境

Java11 导入报错

报错信息如下，请问大佬工具依赖的是JDK1.8的环境吗？如果是，什么时候有JDK11版本的呢？

java.lang.UnsupportedClassVersionError: burp/BurpExtender has been compiled by a more recent version of the Java Runtime (class file version 58.0), this version of the Java Runtime only recognizes class file versions up to 55.0
at java.base/java.lang.ClassLoader.defineClass1(Native Method)
at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016)
at java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
at java.base/java.net.URLClassLoader.defineClass(URLClassLoader.java:555)
at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:458)
at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:452)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:451)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:588)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:521)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:398)
at burp.ftd.a(Unknown Source)
at burp.ftd.(Unknown Source)
at burp.guy.a(Unknown Source)
at burp.kp.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)
The extension could not be loaded because it requires a later version of Java. To use this extension you will need to start Burp with the required or later Java version.

dark模式字体问题

师傅，burp的dark模式下，点击插件的面板上的字体变黑后不会恢复，burp版本：2022.9.5

JDK8 burp22.6版本 加载报错

java.lang.Exception: Json���������쳣��C:sweetPotato1.6\resources\finger.json Cannot invoke "java.util.List.add(Object)" because "list" is null
��ǰ���������ļ�����ʧ�ܣ��뽫�����ļ����ö�Ӧλ�ú������¼��ز���

mac M1下的使用问题

在加载db文件的时候报错：

报错详细信息：
java.sql.SQLException: Error opening connection
at org.sqlite.core.CoreConnection.open(CoreConnection.java:215)
at org.sqlite.core.CoreConnection.(CoreConnection.java:76)
at org.sqlite.jdbc3.JDBC3Connection.(JDBC3Connection.java:24)
at org.sqlite.jdbc4.JDBC4Connection.(JDBC4Connection.java:23)
at org.sqlite.SQLiteConnection.(SQLiteConnection.java:45)
at org.sqlite.JDBC.createConnection(JDBC.java:114)
at org.sqlite.JDBC.connect(JDBC.java:88)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:681)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:252)
at burp.Bootstrap.DBHelper.(DBHelper.java:28)
at burp.Ui.ProjectTableTag.clickChoiceProjectAction(ProjectTableTag.java:643)
at burp.Ui.ProjectTableTag$9.actionPerformed(ProjectTableTag.java:319)
at java.desktop/javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1972)
at java.desktop/javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2313)
at java.desktop/javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:405)
at java.desktop/javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:262)
at java.desktop/javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:279)
at java.desktop/java.awt.Component.processMouseEvent(Component.java:6626)
at java.desktop/javax.swing.JComponent.processMouseEvent(JComponent.java:3389)
at java.desktop/java.awt.Component.processEvent(Component.java:6391)
at java.desktop/java.awt.Container.processEvent(Container.java:2266)
at java.desktop/java.awt.Component.dispatchEventImpl(Component.java:5001)
at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2324)
at java.desktop/java.awt.Component.dispatchEvent(Component.java:4833)
at java.desktop/java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4948)
at java.desktop/java.awt.LightweightDispatcher.processMouseEvent(Container.java:4575)
at java.desktop/java.awt.LightweightDispatcher.dispatchEvent(Container.java:4516)
at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2310)
at java.desktop/java.awt.Window.dispatchEventImpl(Window.java:2780)
at java.desktop/java.awt.Component.dispatchEvent(Component.java:4833)
at java.desktop/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:773)
at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:722)
at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:716)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:399)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:86)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:97)
at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:746)
at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:744)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:399)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:86)
at java.desktop/java.awt.EventQueue.dispatchEvent(EventQueue.java:743)
at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:203)
at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:124)
at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:113)
at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:109)
at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
at java.desktop/java.awt.EventDispatchThread.run(EventDispatchThread.java:90)
Caused by: java.lang.Exception: No native library is found for os.name=Mac and os.arch=aarch64
at org.sqlite.SQLiteJDBCLoader.loadSQLiteNativeLibrary(SQLiteJDBCLoader.java:284)
at org.sqlite.SQLiteJDBCLoader.initialize(SQLiteJDBCLoader.java:65)
at org.sqlite.core.NativeDB.load(NativeDB.java:53)
at org.sqlite.core.CoreConnection.open(CoreConnection.java:211)
... 46 more
java.sql.SQLException: Error opening connection
at org.sqlite.core.CoreConnection.open(CoreConnection.java:215)
at org.sqlite.core.CoreConnection.(CoreConnection.java:76)
at org.sqlite.jdbc3.JDBC3Connection.(JDBC3Connection.java:24)
at org.sqlite.jdbc4.JDBC4Connection.(JDBC4Connection.java:23)
at org.sqlite.SQLiteConnection.(SQLiteConnection.java:45)
at org.sqlite.JDBC.createConnection(JDBC.java:114)
at org.sqlite.JDBC.connect(JDBC.java:88)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:681)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:252)
at burp.Bootstrap.DBHelper.(DBHelper.java:28)
at burp.Ui.ProjectTableTag.clickChoiceProjectAction(ProjectTableTag.java:643)
at burp.Ui.ProjectTableTag$9.actionPerformed(ProjectTableTag.java:319)
at java.desktop/javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1972)
at java.desktop/javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2313)
at java.desktop/javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:405)
at java.desktop/javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:262)
at java.desktop/javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:279)
at java.desktop/java.awt.Component.processMouseEvent(Component.java:6626)
at java.desktop/javax.swing.JComponent.processMouseEvent(JComponent.java:3389)
at java.desktop/java.awt.Component.processEvent(Component.java:6391)
at java.desktop/java.awt.Container.processEvent(Container.java:2266)
at java.desktop/java.awt.Component.dispatchEventImpl(Component.java:5001)
at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2324)
at java.desktop/java.awt.Component.dispatchEvent(Component.java:4833)
at java.desktop/java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4948)
at java.desktop/java.awt.LightweightDispatcher.processMouseEvent(Container.java:4575)
at java.desktop/java.awt.LightweightDispatcher.dispatchEvent(Container.java:4516)
at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2310)
at java.desktop/java.awt.Window.dispatchEventImpl(Window.java:2780)
at java.desktop/java.awt.Component.dispatchEvent(Component.java:4833)
at java.desktop/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:773)
at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:722)
at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:716)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:399)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:86)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:97)
at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:746)
at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:744)
at java.base/java.security.AccessController.doPrivileged(AccessController.java:399)
at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:86)
at java.desktop/java.awt.EventQueue.dispatchEvent(EventQueue.java:743)
at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:203)
at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:124)
at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:113)
at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:109)
at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
at java.desktop/java.awt.EventDispatchThread.run(EventDispatchThread.java:90)
Caused by: java.lang.Exception: No native library is found for os.name=Mac and os.arch=aarch64
at org.sqlite.SQLiteJDBCLoader.loadSQLiteNativeLibrary(SQLiteJDBCLoader.java:284)
at org.sqlite.SQLiteJDBCLoader.initialize(SQLiteJDBCLoader.java:65)
at org.sqlite.core.NativeDB.load(NativeDB.java:53)
at org.sqlite.core.CoreConnection.open(CoreConnection.java:211)
... 46 more

个人认为原因是项目所使用的 sqlite 的 jar 包还未适配 arm，可以考虑换成更高的版本，一点小建议，无伤大雅~
为师傅打call

工具是不是不支持Windows路径，只支持Linux路径？

json文件存在，但仍会报错

把finger.json内容替换成 {}后，能正常运行