# Burpy **Repository Path**: hissec/Burpy ## Basic Information - **Project Name**: Burpy - **Description**: A plugin that allows you execute python and get return to BurpSuite. - **Primary Language**: Unknown - **License**: MIT - **Default Branch**: master - **Homepage**: None - **GVP Project**: No ## Statistics - **Stars**: 0 - **Forks**: 0 - **Created**: 2021-12-11 - **Last Updated**: 2021-12-11 ## Categories & Tags **Categories**: Uncategorized **Tags**: None ## README # Burpy A plugin that allows you execute python and get return to BurpSuite. # Intro During Android APP pentesting, I found it very often that the traffic is encrypted and/or signed, it would be great to have a plugin so we can write python to enc/dec/sign. And, sometimes, you may just want some customized function to modify part of the traffic, all you need is just write a python script and directly call it from within burpsuite. If you wanna take advantage of the intruder with payloads need to be encrypted, you need to `Enable Processor`, and write your own payload processor function. # Author m0nst3r(Song Xinlei) @ CFCA # Contributors with love - @Center-Sun - @ViCrack # TODO - [x] to python3, from version `1.3` - [x] `dynamic` function transform - [x] resize and context menu support for popups (@ViCrack) - [ ] Syntax highlight for popups - [x] word wrap for popups # Changelog - change to use class instead of pure function, so that we can init webdriver+selenium when loading without init it per call - modified plugin to enable 4 function calls: main/enc/dec/sign - add payload processor - add auto enc/dec. encrypt function automatically called when you click GO in burp, and decrypt function automatically called when receive response - changed default pyro4 port, avoiding brida conflicts - migration to python3 - dynamic context menu items extracted from your python script - add `first_line` variable to `header` dict # Usage (`=v2.0`) > NOTE: MAKE SURE YOU HAVE ALL DEPENDENCIES INSTALLED, INCLUDING THE DEPENDENCIES NEEDED FOR YOUR PYTHON SCRIPT 1. install PyRO, version 4 is used. 2. configure python and pyro settings 3. configure the python file you wanna run 4. click "Start server", burpy will read your python script file and get all functions to generate the context menu 5. use context memu item to invoke your script's regarding function 6. write own payload processor, especially usefull with enc/dec > Install editor plugin example: mvn install:install-file -DgroupId=com.fifesoft -DartifactId=rsyntaxtextarea -Dversion=2.6.1.edited -Dpackaging=jar -Dfile=/home/m0nst3r/study/java/rsyntaxtextarea-2.6.1.edited.jar # the python script sample Just write your own logic to modify the header/body as your need, and return the header/body, just that simple! All functions will be extracted to generate context menu, except thos with `_`, `__`prefix! > Note: header["first_line"] ==> `GET /XXX/yyy.php?param1=hello HTTP/1.1`. ```python class Burpy: ''' header is dict body is string ''' def __init__(self): ''' here goes some code that will be kept since "start server" clicked, for example, webdriver, which usually takes long time to init ''' pass def main(self, header, body): return header, body def _test(self, param): ''' function with `_`, `__`as starting letter will be ignored for context menu ''' # param = magic(param) return param def encrypt(self, header, body): ''' Auto Enc/Dec feature require this function ''' header["Cookie"] = "admin=1" return header, body def decrypt(self, header, body): ''' Auto Enc/Dec feature require this function ''' # header = magic(header) # body = magic(body) return header, body def processor(self, payload): ''' Enable Processor feature require this function payload processor function ''' return payload+"123" ``` # Usage (` check the examples for scripts > NOTE: MAKE SURE YOU HAVE ALL DEPENDENCIES INSTALLED, INCLUDING THE DEPENDENCIES NEEDED FOR YOUR PYTHON SCRIPT 1. install PyRO, version 4 is used. 2. configure python and pyro settings 3. configure the python file you wanna run 4. use `spawn` to test the result 5. use `Burpy Main`/`Burpy Enc`/`Burpy Dec`/`Burpy Sign` context memu to invoke your script 6. write own payload processor, especially usefull with enc/dec > Install editor plugin example: mvn install:install-file -DgroupId=com.fifesoft -DartifactId=rsyntaxtextarea -Dversion=2.6.1.edited -Dpackaging=jar -Dfile=/home/m0nst3r/study/java/rsyntaxtextarea-2.6.1.edited.jar # the python script sample Just write your own logic to modify the header/body as your need, and return the header/body, just that simple! Note: if you need to handle response data, e.g decrypt response, you may want to write if-else, because in some cases, the response is different with the request. For example, the request is `encrypted=XXXXXX`, but the response is `XXXXXX`, without `encrypted`. ```python class Burpy: ''' header is dict body is string ''' def __init__(self): ''' here goes some code that will be kept since "start server" clicked, for example, webdriver, which usually takes long time to init ''' pass def main(self, header, body): return header, body def encrypt(self, header, body): header["Cookie"] = "admin=1" return header, body def decrypt(self, header, body): ''' You may want to add logic if the response differ from the request, for example in the request, the encrypted data is followed after "data=", but in the response, the whole response body is encrypted data, without "data=" ''' # header = magic(header) # body = magic(body) return header, body def sign(self, header, body): header.update({"Sign":"123123123"}) return header, body def processor(self, payload): ''' payload processor function ''' return payload+"123" ``` # Reference the great Brida # others - Good ideas and contributions are welcomed.