search

akto-api-security / akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
https://www.akto.io/
MIT License
910 stars 183 forks source link

Akto Burp plugin error #858

Open resource-not-found-blank opened 5 months ago

resource-not-found-blank commented 5 months ago

Error during plugin installation process:

java.lang.IllegalArgumentException: Invalid URL
    at burp.Zzt.includeInScope(Unknown Source)
    at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
    at java.base/java.lang.reflect.Method.invoke(Method.java:578)
    at burp.Zkok.invoke(Unknown Source)
    at jdk.proxy2/jdk.proxy2.$Proxy150.includeInScope(Unknown Source)
    at burp.Zntk.lambda$includeInScope$5(Unknown Source)
    at burp.Zrwr.ZS(Unknown Source)
    at burp.Zntk.includeInScope(Unknown Source)
    at burp.Zfuh.includeInScope(Unknown Source)
    at burp.Znao.includeInScope(Unknown Source)
    at burp.Zex.includeInScope(Unknown Source)
    at com.coreyd97.BurpExtenderUtilities.Preferences.setupProjectSettingsStore(Preferences.java:85)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:54)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:39)
    at com.coreyd97.BurpExtenderUtilities.PreferenceFactory.<init>(PreferenceFactory.java:15)
    at com.nccgroup.loggerplusplus.preferences.LoggerPreferenceFactory.<init>(LoggerPreferenceFactory.java:33)
    at com.nccgroup.loggerplusplus.preferences.PreferencesController.<init>(PreferencesController.java:22)
    at com.nccgroup.loggerplusplus.LoggerPlusPlus.registerExtenderCallbacks(LoggerPlusPlus.java:100)
    at burp.Zlfd.Z_(Unknown Source)
    at burp.Ziil.Zx(Unknown Source)
    at burp.Ziiu.lambda$initialiseOnNewThread$0(Unknown Source)
    at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:577)
    at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
    at java.base/java.lang.Thread.run(Thread.java:1623)
java.lang.IllegalArgumentException: Invalid URL
    at burp.Zmt9.ZA(Unknown Source)
    at burp.Zrwr.ZS(Unknown Source)
    at burp.Zntk.includeInScope(Unknown Source)
    at burp.Zfuh.includeInScope(Unknown Source)
    at burp.Znao.includeInScope(Unknown Source)
    at burp.Zex.includeInScope(Unknown Source)
    at com.coreyd97.BurpExtenderUtilities.Preferences.setupProjectSettingsStore(Preferences.java:85)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:54)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:39)
    at com.coreyd97.BurpExtenderUtilities.PreferenceFactory.<init>(PreferenceFactory.java:15)
    at com.nccgroup.loggerplusplus.preferences.LoggerPreferenceFactory.<init>(LoggerPreferenceFactory.java:33)
    at com.nccgroup.loggerplusplus.preferences.PreferencesController.<init>(PreferencesController.java:22)
    at com.nccgroup.loggerplusplus.LoggerPlusPlus.registerExtenderCallbacks(LoggerPlusPlus.java:100)
    at burp.Zlfd.Z_(Unknown Source)
    at burp.Ziil.Zx(Unknown Source)
    at burp.Ziiu.lambda$initialiseOnNewThread$0(Unknown Source)
    at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:577)
    at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
    at java.base/java.lang.Thread.run(Thread.java:1623)
java.lang.IllegalArgumentException: Invalid URL
    at burp.Zmt9.ZA(Unknown Source)
    at burp.Zrwr.ZS(Unknown Source)
    at burp.Zntk.includeInScope(Unknown Source)
    at burp.Zfuh.includeInScope(Unknown Source)
    at burp.Znao.includeInScope(Unknown Source)
    at burp.Zex.includeInScope(Unknown Source)
    at com.coreyd97.BurpExtenderUtilities.Preferences.setupProjectSettingsStore(Preferences.java:85)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:54)
    at com.coreyd97.BurpExtenderUtilities.Preferences.<init>(Preferences.java:39)
    at com.coreyd97.BurpExtenderUtilities.PreferenceFactory.<init>(PreferenceFactory.java:15)
    at com.nccgroup.loggerplusplus.preferences.LoggerPreferenceFactory.<init>(LoggerPreferenceFactory.java:33)
    at com.nccgroup.loggerplusplus.preferences.PreferencesController.<init>(PreferencesController.java:22)
    at com.nccgroup.loggerplusplus.LoggerPlusPlus.registerExtenderCallbacks(LoggerPlusPlus.java:100)
    at burp.Zlfd.Z_(Unknown Source)
    at burp.Ziil.Zx(Unknown Source)
    at burp.Ziiu.lambda$initialiseOnNewThread$0(Unknown Source)
    at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:577)
    at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
    at java.base/java.lang.Thread.run(Thread.java:1623)

Burp Professional - 2023.12.1.3

eXerc1st commented 5 months ago

I'm also facing this issue

Elizarfish commented 5 months ago

Yeah, it affected me too.

E1tex commented 5 months ago

Same issue.

GurbanV commented 5 months ago

Also same for me and others how we can see. From Burp's user forum: https://forum.portswigger.net/thread/montoyaapi-v2023-12-1-invalid-url-exception-in-includeinscope-api-22aee5ae

ankush-jain-akto commented 5 months ago

Hi folks.

It is indeed because Burp changed their APIs completely. We are still in the process of making Akto extension work with the new APIs - expect it by end of this month.

Having said that, it will work with the older versions of Burp. Any version pre-2024 should work.

I will keep posting updates every 2 days here about the progress.

ankush-jain-akto commented 5 months ago

[Update 1]

It seems Burp has fixed this issue in a beta vesrion - A new version - 2024.1.1.1-26891 (Early adopter) works.

avneesh-akto commented 5 months ago

[Update 2]

Burp has acknowledged the issue and have released a fix in their early-adopter release channel.

Akto Burp plugin will work pre v2023.10.1 or post v2024.1.1.1