Skip to content

Commit

Permalink
20150720
Browse files Browse the repository at this point in the history
  • Loading branch information
xl7dev committed Jul 20, 2015
1 parent 5dbfdcf commit 9ee75e4
Show file tree
Hide file tree
Showing 4 changed files with 1,022 additions and 0 deletions.
57 changes: 57 additions & 0 deletions Extender/burp-git-bridge/.gitignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]

# C extensions
*.so

# Distribution / packaging
.Python
env/
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
*.egg-info/
.installed.cfg
*.egg

# PyInstaller
# Usually these files are written by a python script from a template
# before PyInstaller builds the exe, so as to inject date/other infos into it.
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*,cover

# Translations
*.mo
*.pot

# Django stuff:
*.log

# Sphinx documentation
docs/_build/

# PyBuilder
target/
20 changes: 20 additions & 0 deletions Extender/burp-git-bridge/LICENSE.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
The MIT License (MIT)

Copyright (c) 2015 Jonathan Foote

Permission is hereby granted, free of charge, to any person obtaining a copy of
this software and associated documentation files (the "Software"), to deal in
the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
the Software, and to permit persons to whom the Software is furnished to do so,
subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
70 changes: 70 additions & 0 deletions Extender/burp-git-bridge/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,70 @@
# Git Bridge extension for Burp Suite Pro

The Git Bridge plugin lets Burp users store Burp data and collaborate via git. Users can right-click supported items in Burp to send them to a git repo and use the Git Bridge tab to send items back to their respective Burp tools.

## How to Use

### Load the extension

Download `burp_git_bridge.py` and load the plugin via the "Extender" tab as usual. Note: This plugin is written in Python so you'll need follow the steps to setup Jython in Burp if you haven't already.

Git Bridge creates a git repo at `~/.burp_git_bridge`.

![](http://foote.pub/images/burp-git/burp-git-install.png)

### Store Revisions Locally

Right click on an interesting Scanner or Repeater item and choose `Send to Git Bridge`

![](http://foote.pub/images/burp-git/burp-git-send-to-git.png)


### Share (or Create a Remote Backup of) Burp data

Open a shell, change directories to the Burp git bridge repo and git it.

```
$ cd ~/.burp_git_bridge
$ git remote add origin ssh://[email protected]/jfoote/burp-git-bridge-test.git
$ git push -u origin master
$ git branch my_findings
```

![](http://foote.pub/images/burp-git/burp-git-github.png)

PSA: Only interact with git servers you trust, especially when dealing with sensitive data.

### Load Shared Burp data

Open a shell, change directories to the Burp git bridge repo and issue a pull.

```
$ cd ~/.burp_git_bridge
$ git pull
```

Back in Burp, flip to the "Git Bridge" tab and click "Reload"

![](http://foote.pub/images/burp-git/burp-git-reload.png)

Then send items to their respective tools

![](http://foote.pub/images/burp-git/burp-git-send-to-tools.png)

Burp away

![](http://foote.pub/images/burp-git/burp-git-repeater.png)

## Notes

This extension is a PoC. Right now only Repeater and Scanner are supported,
and the code could use refactoring. If you're interested in a more polished
version or more features let me know, or better yet consider sending me a pull request.

Thanks for checking it out.

```
Jonathan Foote
[email protected]
2015-04-21
```
Loading

0 comments on commit 9ee75e4

Please sign in to comment.