Open jpasski opened 6 years ago
JavaExec seems to be the way to go. However, Burp would need to terminate gracefully on its own. This could be performed via an extension that, once loaded, calls whatever it needs to do and then calls burp.IBurpExtenderCallbacks.exitSuite(boolean)
. It also should start burp in headless mode (-Djava.awt.headless=true
). This forum post alludes to the extension needing to be loaded first and then its configuration stored.
Create an integration test that starts the free version of Burp and verifies a request is sent to a mocked proxy when extension is loaded and mocked proxy is configured. Bonus points for negative tests if possible.