simioni87 / auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.
MIT License
185 stars 48 forks source link

Export and Import features not available anymore? #42

Open ngregoire opened 1 year ago

ngregoire commented 1 year ago

The features allowing to import from / export to JSON files seem to have disappear (tested on v1.1.13 from December 2022). Am I missing a new button or menu?

simioni87 commented 1 year ago

You are right ngregoire, this feature was available through the drop down menu on the top of the burpsuite window. The "hack" to set this menu from the extension context is not working anymore. I will add this below the Settings button with the next release.

ngregoire commented 1 year ago

Thanks in advance!

ngregoire commented 1 year ago

Here's how Hackvertor creates its own entry in the menu bar https://github.com/hackvertor/hackvertor/blob/e7c9f8154976f689cf869a0a3ee3e52d43553551/src/main/java/burp/BurpExtender.java#L211-L224

Note that getBurpFrame() is defined in the same file https://github.com/hackvertor/hackvertor/blob/e7c9f8154976f689cf869a0a3ee3e52d43553551/src/main/java/burp/BurpExtender.java#L1187-L1194

On the other side, the new Montoya API includes a helper named menuBar() https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/ui/UserInterface.html#menuBar()