nccgroup / LoggerPlusPlus

Advanced Burp Suite Logging Extension
GNU Affero General Public License v3.0
619 stars 154 forks source link

Malformed Elastic Exporter Address #208

Closed MrTuxracer closed 5 months ago

MrTuxracer commented 5 months ago

Description: When setting the address in the Elastic Exporter Configuration, the value somehow gets mangled to a string like HTTPS://192.168.1.1/192.168.1.1:9200/logger where 192.168.1.1 is the address value.

Steps To Reproduce:

Expected behavior: It looks like the address value is somehow used twice when constructing the Elastic URL, but it should only be there once.

Version: Tested on the following clean/fresh Burp combinations (all have the same problem):

CoreyD97 commented 5 months ago

Thanks again for the report.

Just double checking, does the exporter start up okay after displaying this message? Looks like the HttpHost object is created as expected but the log message might just be incorrect since it's being constructed manually.

https://github.com/nccgroup/LoggerPlusPlus/blob/master/src%2Fmain%2Fjava%2Fcom%2Fnccgroup%2Floggerplusplus%2Fexports%2FElasticExporter.java#L122-L123

MrTuxracer commented 5 months ago

While debugging, I realized that my Java had an old ES certificate added, which seems to be the reason why Logger++ always gets stuck when connecting to my ES cluster. So that log output was just misleading my debugging, and the feature is still working as expected.

Thanks again for double-checking! Very much appreciated!