gh0stkey / CaA

CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.
Apache License 2.0
843 stars 56 forks source link

功能建议与bug #12

Closed geek4what closed 3 months ago

geek4what commented 7 months ago

burp:2024.3.1.3 JDK:21

参数匹配处出现异常(已筛选域名,图中域名为防泄露已删除),前半部分收集到正常参数,后半部分收集的就是垃圾字符: image

另外插件还有报错:

    at java.desktop/java.awt.Component.dispatchEvent(Component.java:4828)
    at java.desktop/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:775)
    at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:720)
    at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:714)
    at java.base/java.security.AccessController.doPrivileged(AccessController.java:400)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:87)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:98)
    at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:747)
    at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:745)
    at java.base/java.security.AccessController.doPrivileged(AccessController.java:400)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:87)
    at java.desktop/java.awt.EventQueue.dispatchEvent(EventQueue.java:744)
    at burp.Zwr6.dispatchEvent(Unknown Source)
    at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:203)
    at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:124)
    at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:113)
    at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:109)
    at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
    at java.desktop/java.awt.EventDispatchThread.run(EventDispatchThread.java:90)
java.lang.IllegalArgumentException: URLDecoder: Illegal hex characters in escape (%) pattern - Error at index 0 in: "ï¿"
    at java.base/java.net.URLDecoder.decode(URLDecoder.java:243)
    at burp.Zevb.decode(Unknown Source)
    at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
    at java.base/java.lang.reflect.Method.invoke(Method.java:580)
    at burp.Zrp.invoke(Unknown Source)
    at jdk.proxy2/jdk.proxy2.$Proxy124.decode(Unknown Source)
    at burp.Zd9q.decode(Unknown Source)
    at caa.instances.Collector.decodeParameter(Collector.java:268)
    at caa.instances.Collector.passiveAudit(Collector.java:114)
    at caa.instances.editor.ResponseEditor$Editor.isEnabledFor(ResponseEditor.java:80)
    at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
    at java.base/java.lang.reflect.Method.invoke(Method.java:580)
    at burp.Zrp.invoke(Unknown Source)
    at jdk.proxy5/jdk.proxy5.$Proxy103.isEnabledFor(Unknown Source)
    at burp.Zhz5.Zy(Unknown Source)
    at burp.Zh2r.Zi(Unknown Source)
    at burp.Zeq_.lambda$updateVisiblePanes$1(Unknown Source)
    at java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:178)
    at java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1708)
    at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509)
    at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:499)
    at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:921)
    at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
    at java.base/java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:682)
    at burp.Zde7.ZC(Unknown Source)
    at burp.Zde7.ZR(Unknown Source)
    at burp.Zeq_.Zt(Unknown Source)
    at burp.Zeq_.Zs(Unknown Source)
    at burp.Zd8j.Zw(Unknown Source)
    at burp.Zd8j.lambda$new$2(Unknown Source)
    at java.desktop/java.awt.Component.processHierarchyEvent(Component.java:6788)
    at java.desktop/java.awt.Component.processEvent(Component.java:6407)
    at java.desktop/java.awt.Container.processEvent(Container.java:2266)
    at java.desktop/java.awt.Component.dispatchEventImpl(Component.java:4996)
    at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2324)
    at java.desktop/java.awt.Component.dispatchEvent(Component.java:4828)
    at java.desktop/java.awt.Component.createHierarchyEvents(Component.java:5634)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1474)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Container.createHierarchyEvents(Container.java:1470)
    at java.desktop/java.awt.Component.show(Component.java:1691)
    at java.desktop/java.awt.Component.show(Component.java:1728)
    at java.desktop/java.awt.Component.setVisible(Component.java:1675)
    at java.desktop/javax.swing.JComponent.setVisible(JComponent.java:2729)
    at java.desktop/javax.swing.JTabbedPane.fireStateChanged(JTabbedPane.java:424)
    at java.desktop/javax.swing.JTabbedPane$ModelListener.stateChanged(JTabbedPane.java:297)
    at java.desktop/javax.swing.DefaultSingleSelectionModel.fireStateChanged(DefaultSingleSelectionModel.java:148)
    at java.desktop/javax.swing.DefaultSingleSelectionModel.setSelectedIndex(DefaultSingleSelectionModel.java:79)
    at java.desktop/javax.swing.JTabbedPane.setSelectedIndexImpl(JTabbedPane.java:650)
    at java.desktop/javax.swing.JTabbedPane.setSelectedIndex(JTabbedPane.java:625)
    at burp.Zcem.setSelectedIndex(Unknown Source)
    at java.desktop/javax.swing.plaf.basic.BasicTabbedPaneUI$Handler.mousePressed(BasicTabbedPaneUI.java:4140)
    at com.formdev.flatlaf.ui.FlatTabbedPaneUI$Handler.mousePressed(FlatTabbedPaneUI.java:2697)
    at java.desktop/java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:287)
    at java.desktop/java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:287)
    at java.desktop/java.awt.Component.processMouseEvent(Component.java:6618)
    at java.desktop/javax.swing.JComponent.processMouseEvent(JComponent.java:3398)
    at java.desktop/java.awt.Component.processEvent(Component.java:6386)
    at java.desktop/java.awt.Container.processEvent(Container.java:2266)
    at java.desktop/java.awt.Component.dispatchEventImpl(Component.java:4996)
    at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2324)
    at java.desktop/java.awt.Component.dispatchEvent(Component.java:4828)
    at burp.Zwpj.ZU(Unknown Source)
    at burp.Zmc_.mousePressed(Unknown Source)
    at java.desktop/java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:288)
    at java.desktop/java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:287)
    at java.desktop/java.awt.Component.processMouseEvent(Component.java:6618)
    at java.desktop/javax.swing.JComponent.processMouseEvent(JComponent.java:3398)
    at java.desktop/java.awt.Component.processEvent(Component.java:6386)
    at java.desktop/java.awt.Container.processEvent(Container.java:2266)
    at java.desktop/java.awt.Component.dispatchEventImpl(Component.java:4996)
    at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2324)
    at java.desktop/java.awt.Component.dispatchEvent(Component.java:4828)
    at java.desktop/java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4948)
    at java.desktop/java.awt.LightweightDispatcher.processMouseEvent(Container.java:4572)
    at java.desktop/java.awt.LightweightDispatcher.dispatchEvent(Container.java:4516)
    at java.desktop/java.awt.Container.dispatchEventImpl(Container.java:2310)
    at java.desktop/java.awt.Window.dispatchEventImpl(Window.java:2780)
    at java.desktop/java.awt.Component.dispatchEvent(Component.java:4828)
    at java.desktop/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:775)
    at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:720)
    at java.desktop/java.awt.EventQueue$4.run(EventQueue.java:714)
    at java.base/java.security.AccessController.doPrivileged(AccessController.java:400)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:87)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:98)
    at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:747)
    at java.desktop/java.awt.EventQueue$5.run(EventQueue.java:745)
    at java.base/java.security.AccessController.doPrivileged(AccessController.java:400)
    at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:87)
    at java.desktop/java.awt.EventQueue.dispatchEvent(EventQueue.java:744)
    at burp.Zwr6.dispatchEvent(Unknown Source)
    at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:203)
    at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:124)
    at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:113)
    at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:109)
    at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
    at java.desktop/java.awt.EventDispatchThread.run(EventDispatchThread.java:90)

最后有一个功能建议,可否添加一个右键删除功能: image

多谢老哥

gh0stkey commented 7 months ago

可能是畸形数据包导致,这个无法避免,另外即使删除了数据也有可能会被重新收集到。

geek4what commented 7 months ago

可能是畸形数据包导致,这个无法避免,另外即使删除了数据也有可能会被重新收集到。

可否对删除的数据进行标记,下次重复的时候不再进行收集避免干扰

HHHHDDDDD222 commented 6 months ago

可能是畸形数据包导致,这个无法避免,另外即使删除了数据也有可能会被重新收集到。

可以加入黑名单,下次不收集这个参数

gh0stkey commented 6 months ago

正在考虑如何更好的进行优化,感谢反馈。