PortSwigger / backslash-powered-scanner

Finds unknown classes of injection vulnerabilities
Other
641 stars 93 forks source link

usage? #9

Closed kirtixs closed 7 years ago

kirtixs commented 7 years ago

Hi,

where exactly can I use or enable/disable this extension?

The best, Simon

albinowax commented 7 years ago

You can install the extension via the BApp store. It's enabled/disabled via the Extensions pane. When enabled, it'll automatically run and generate results (which will appear alongside the other burp issues) whenever you launch an active scan.

kirtixs commented 7 years ago

Wow, thanks for the quick reply. Wasn't quite sure if I had to enable something while actively scanning.

I wish you a lot of bugs :)

albinowax commented 7 years ago

They show up as 'Extender' requests in Logger++

sizar3x commented 6 years ago

hlw sir, i installed the extention successfully but i cant seee where the extention is it?

albinowax commented 6 years ago

You can install the extension via the BApp store. It's enabled/disabled via the Extensions pane. When enabled, it'll automatically run and generate results (which will appear alongside the other burp issues) whenever you launch an active scan.

You can open the configuration using the 'Backslash' menu on the top right: https://pbs.twimg.com/media/DV7axO4XcAE178o.jpg:large

ShH01m3s commented 5 years ago

Hello, guys! Is this extension fully working on MacOS only? When I install the extension on a Window machine, not only I extremely raaaaaaaaaaaaaaaarely see Backslash's report after active scan (even when scanning very buggy websites designed for CTFs, but I also fail to find a tab on the top right or left or anywhere else in the application to configure the probes or at least see them. Please help! Is there some tutorial available on the Internet? Burp is of version 2.1.03. Thanks

Edit: After several adding and removing on the Extension tab I managed to get the Backslash tab on the top pane.

ShH01m3s commented 5 years ago

After adding and removing the extension in Extender I've managed to get the Backslash tab on the top pane. Also, I personally found using Logger++ helpful in analyzing and watching the requests generated during scan.