search

cyal1 / PyBurp

PyBurp Allows you to modify Burp Suite proxy requests and responses with simple Python code, supports remote invocation of encryption and decryption methods in browsers or apps, greatly facilitating security professionals in performing security testing on encrypted HTTP request and response transactions.
22 stars 7 forks source link

Doesn't actually work? #2

Closed YSaxon closed 2 months ago

YSaxon commented 3 months ago

I love the idea of this extension, but it doesn't seem to be working at all. I thought at first it was something I did wrong in my own custom script, so I loaded and ran the examples/default.py script, and with the internal chromium browser navigated to https://wwww.example.com/api/test, and nothing gets changed. No notes, no HighlightColor, no BcryptMontoya header. Unfortunately I can't tell why nothing is working. Perhaps you can suggest additional steps I can take to debug it?

YSaxon commented 3 months ago

Fwiw, I'm on a mac, and also having the same issue reported at https://github.com/Anof-cyber/PyCript/issues/8 for that extension. Maybe there's a general problem with calling into python from a mac environment?

cyal1 commented 3 months ago

Hello, thank you for liking the extender. It works form me on mac M1, my version of burpsuite is 2024.2.1.3, have you click the run button? and you should config the jython environment in Setting.

image

Could you see any errors on the extended error tab?

image
YSaxon commented 3 months ago

I downloaded your latest release jar, confirmed jython, exactly matched what you have, and still neither working nor giving any debug information... Jython

Screenshot 2024-06-28 at 12 01 22 PM

Running your example code

Screenshot 2024-06-28 at 11 59 03 AM

Sent request from repeater as in your screenshot

Screenshot 2024-06-28 at 12 00 49 PM

No Errors (or Output)

Screenshot 2024-06-28 at 11 59 31 AM

My Burp Suite version is 2024.5.4, which is higher than your version. Might something have broken in the later versions? Could you try updating your Burp?

Screenshot 2024-06-28 at 12 07 04 PM
cyal1 commented 3 months ago

Hi, It's still working for me on 2024.5.4, how about the Detail tab on your Mac.

image
cyal1 commented 3 months ago

The jar file I released was built on my M1 MacBook, which uses the ARM architecture. Perhaps for this reason, could you try building it on yourself device?

cyal1 commented 2 months ago

Please download https://github.com/cyal1/BcryptMontoya/releases/tag/v0.1.8