Compare commits

...

37 Commits
2.5 ... 2.5.5

Author SHA1 Message Date
gh0stkey
0225c00f69 Version: 2.5.5 Update 2023-10-26 14:17:56 +08:00
gh0stkey
eafae602b8 Version: 2.5.4.1 2023-10-25 16:02:07 +08:00
gh0stkey
e56d8eb5d5 Version: 2.5.4 Update 2023-10-24 17:54:44 +08:00
gh0stkey
681cce0644 Version: 2.5.4 Update 2023-10-24 17:51:21 +08:00
gh0stkey
d43809e25f Version: 2.5.3 Update 2023-10-23 21:59:08 +08:00
gh0stkey
567dea6c60 Version: 2.5.3 Update 2023-10-23 21:51:12 +08:00
ᴋᴇʏ
8c388510c5 Version: 2.5.2 Update 2023-10-19 22:57:40 +08:00
ᴋᴇʏ
e22596819b Version: 2.5.2 Update 2023-10-19 22:46:11 +08:00
ᴋᴇʏ
d2cd7a0d03 Version: 2.5.2 Update 2023-10-19 22:45:44 +08:00
ᴋᴇʏ
67afe1f650 Version: 2.5.2 Update 2023-10-19 22:44:34 +08:00
ᴋᴇʏ
0602346249 Version: 2.5.2 Update 2023-10-19 22:43:29 +08:00
ᴋᴇʏ
953b966961 Version: 2.5.2 Update 2023-10-19 22:42:54 +08:00
ᴋᴇʏ
4c23d62576 Version: 2.5.2 Update 2023-10-19 22:41:50 +08:00
ᴋᴇʏ
6e9b8c8f37 Version: 2.5.2 Update 2023-10-19 22:41:14 +08:00
ᴋᴇʏ
ed58d891d5 Version: 2.5.2 Update 2023-10-19 22:40:06 +08:00
ᴋᴇʏ
33f5cab037 Version: 2.5.2 Update 2023-10-19 22:38:50 +08:00
ᴋᴇʏ
8b79c71df9 Version: 2.5.1 Update 2023-10-18 17:28:07 +08:00
ᴋᴇʏ
9ea0e4be9c Version: 2.5.1 Update 2023-10-18 17:08:09 +08:00
ᴋᴇʏ
41f197bcb2 Version: 2.5.1 Update 2023-10-18 15:17:45 +08:00
ᴋᴇʏ
31e419aed2 Version: 2.5.1 Update 2023-10-18 15:14:48 +08:00
ᴋᴇʏ
cf90a9366a Version: 2.5.1 Update 2023-10-18 15:14:33 +08:00
ᴋᴇʏ
6546446e4f Add files via upload 2023-10-18 00:51:20 +08:00
ᴋᴇʏ
6c4073c8ee Version: 2.5.1 Update 2023-10-18 00:51:01 +08:00
ᴋᴇʏ
1e1d51921d Version: 2.5.1 Update 2023-10-18 00:50:05 +08:00
ᴋᴇʏ
9135b8cbd2 Add files via upload 2023-10-18 00:49:02 +08:00
ᴋᴇʏ
cc7956d8dc Version: 2.5.1 Update 2023-10-18 00:48:12 +08:00
ᴋᴇʏ
405efdd5da Version: 2.5.1 Update 2023-10-18 00:47:41 +08:00
ᴋᴇʏ
0bb425f00b Version: 2.5.1 Update 2023-10-18 00:47:34 +08:00
ᴋᴇʏ
0bdff6fe28 Version: 2.5.1 Update 2023-10-18 00:46:21 +08:00
ᴋᴇʏ
6bd153d16a Version: 2.5.1 Update 2023-10-18 00:45:22 +08:00
ᴋᴇʏ
b12f9355fa Version: 2.5.1 Update 2023-10-18 00:44:50 +08:00
ᴋᴇʏ
fa9dcfc3d2 Version: 2.5.1 Update 2023-10-18 00:43:39 +08:00
ᴋᴇʏ
2e23388925 Version: 2.5.1 Update 2023-10-18 00:42:46 +08:00
ᴋᴇʏ
06fd54c9ce Delete BurpExtender.java 2023-10-18 00:42:22 +08:00
ᴋᴇʏ
0707a773c8 Version: 2.5.1 Update 2023-10-18 00:41:51 +08:00
ᴋᴇʏ
d0f49f8e6c Version: 2.5.1 Update 2023-10-18 00:40:37 +08:00
gh0stkey
5404c90c00 Update 2023-10-12 21:51:49 +08:00
19 changed files with 478 additions and 191 deletions

View File

@@ -21,6 +21,8 @@
1. Linux/Mac用户的配置文件目录`~/.config/HaE/` 1. Linux/Mac用户的配置文件目录`~/.config/HaE/`
2. Windows用户的配置文件目录`%USERPROFILE%/.config/HaE/` 2. Windows用户的配置文件目录`%USERPROFILE%/.config/HaE/`
除此之外,您也可以选择将配置文件存放在`HaE Jar包`的同级目录下的`/.config/HaE/`中,**以便于离线携带**。
## 优势特点 ## 优势特点
1. 精细配置:高度自由的配置选项,以满足各类精细化场景需求。 1. 精细配置:高度自由的配置选项,以满足各类精细化场景需求。

View File

@@ -30,5 +30,4 @@ dependencies {
compile group: 'org.yaml', name: 'snakeyaml', version: '1.28' compile group: 'org.yaml', name: 'snakeyaml', version: '1.28'
compile 'net.sourceforge.jregex:jregex:1.2_01' compile 'net.sourceforge.jregex:jregex:1.2_01'
compile 'dk.brics.automaton:automaton:1.11-8' compile 'dk.brics.automaton:automaton:1.11-8'
compile 'com.squareup.okhttp:okhttp:2.7.5'
} }

Binary file not shown.

Before

Width:  |  Height:  |  Size: 50 KiB

After

Width:  |  Height:  |  Size: 65 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 101 KiB

After

Width:  |  Height:  |  Size: 242 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 111 KiB

After

Width:  |  Height:  |  Size: 117 KiB

View File

@@ -1,17 +1,18 @@
package burp; package burp;
import burp.config.ConfigLoader;
import burp.core.processor.ColorProcessor; import burp.core.processor.ColorProcessor;
import burp.core.processor.MessageProcessor; import burp.core.processor.MessageProcessor;
import burp.ui.MainUI; import burp.ui.MainUI;
import burp.ui.board.MessagePanel; import burp.ui.board.MessagePanel;
import java.beans.PropertyChangeEvent;
import java.beans.PropertyChangeListener;
import java.net.URL;
import java.security.NoSuchAlgorithmException; import java.security.NoSuchAlgorithmException;
import java.util.Map; import java.util.*;
import java.util.Objects;
import javax.swing.*; import javax.swing.*;
import java.awt.*; import java.awt.*;
import java.nio.charset.StandardCharsets;
import java.io.PrintWriter; import java.io.PrintWriter;
import java.util.ArrayList;
import java.util.List; import java.util.List;
import javax.swing.event.ChangeEvent; import javax.swing.event.ChangeEvent;
import javax.swing.event.ChangeListener; import javax.swing.event.ChangeListener;
@@ -22,10 +23,9 @@ import javax.swing.event.ChangeListener;
public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEditorTabFactory, ITab { public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEditorTabFactory, ITab {
private MainUI main; private MainUI main;
// stdout变成公开属性便于其他类调用输出调试信息
public static PrintWriter stdout; public static PrintWriter stdout;
private IBurpExtenderCallbacks callbacks; public static IBurpExtenderCallbacks callbacks;
private static IExtensionHelpers helpers; public static IExtensionHelpers helpers;
ColorProcessor colorProcessor = new ColorProcessor(); ColorProcessor colorProcessor = new ColorProcessor();
MessageProcessor messageProcessor = new MessageProcessor(); MessageProcessor messageProcessor = new MessageProcessor();
private MessagePanel messagePanel; private MessagePanel messagePanel;
@@ -33,10 +33,12 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
@Override @Override
public void registerExtenderCallbacks(final IBurpExtenderCallbacks callbacks) public void registerExtenderCallbacks(final IBurpExtenderCallbacks callbacks)
{ {
this.callbacks = callbacks; BurpExtender.callbacks = callbacks;
BurpExtender.helpers = callbacks.getHelpers(); BurpExtender.helpers = callbacks.getHelpers();
String version = "2.5"; new ConfigLoader();
String version = "2.5.5";
callbacks.setExtensionName(String.format("HaE (%s) - Highlighter and Extractor", version)); callbacks.setExtensionName(String.format("HaE (%s) - Highlighter and Extractor", version));
// 定义输出 // 定义输出
@@ -72,7 +74,43 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
@Override @Override
public Component getUiComponent() { public Component getUiComponent() {
return main; JTabbedPane HaETabbedPane = new JTabbedPane();
HaETabbedPane.addTab("", getImageIcon(false), main);
HaETabbedPane.addTab(" Highlighter and Extractor - Empower ethical hacker for efficient operations ", null);
HaETabbedPane.setEnabledAt(1, false);
HaETabbedPane.addPropertyChangeListener("background", new PropertyChangeListener() {
@Override
public void propertyChange(PropertyChangeEvent e) {
boolean isDarkBg = isDarkBg();
HaETabbedPane.setIconAt(0, getImageIcon(isDarkBg));
}
private boolean isDarkBg() {
Color bg = HaETabbedPane.getBackground();
int r = bg.getRed();
int g = bg.getGreen();
int b = bg.getBlue();
int avg = (r + g + b) / 3;
return avg < 128;
}
});
return HaETabbedPane;
}
private ImageIcon getImageIcon(boolean isDark) {
ClassLoader classLoader = getClass().getClassLoader();
URL imageURL;
if (isDark) {
imageURL = classLoader.getResource("logo.png");
} else {
imageURL = classLoader.getResource("logo_black.png");
}
ImageIcon originalIcon = new ImageIcon(imageURL);
Image originalImage = originalIcon.getImage();
Image scaledImage = originalImage.getScaledInstance(30, 20, Image.SCALE_FAST);
ImageIcon scaledIcon = new ImageIcon(scaledImage);
return scaledIcon;
} }
/** /**
@@ -92,27 +130,32 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
IHttpService iHttpService = null; IHttpService iHttpService = null;
String host = "";
try { try {
iHttpService = messageInfo.getHttpService(); iHttpService = messageInfo.getHttpService();
host = iHttpService.getHost();
} catch (Exception ignored) { } catch (Exception ignored) {
} }
// 获取请求主机信息 if (Objects.equals(host, "")) {
assert iHttpService != null; List<String> requestTmpHeaders = helpers.analyzeRequest(content).getHeaders();
String host = iHttpService.getHost(); host = requestTmpHeaders.get(1).split(":")[1].trim();
}
String c = new String(content, StandardCharsets.UTF_8).intern();
List<Map<String, String>> result = null; List<Map<String, String>> result = null;
try { try {
result = messageProcessor.processMessage(helpers, content, messageIsRequest, true, host); result = messageProcessor.processMessage(helpers, content, messageIsRequest, true, host);
} catch (NoSuchAlgorithmException e) { } catch (NoSuchAlgorithmException e) {
throw new RuntimeException(e); throw new RuntimeException(e);
} }
String resComment = ""; String resComment = "";
String resColor = ""; String resColor = "";
String originalColor = messageInfo.getHighlight(); String originalColor = messageInfo.getHighlight();
String originalComment = messageInfo.getComment(); String originalComment = messageInfo.getComment();
if (result != null && !result.isEmpty() && result.size() > 0) { if (result != null && !result.isEmpty() && result.size() > 0) {
List<String> colorList = new ArrayList<>(); List<String> colorList = new ArrayList<>();
@@ -125,19 +168,53 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
messageInfo.setHighlight(resColor); messageInfo.setHighlight(resColor);
String addComment = String.join(", ", result.get(1).get("comment")); String addComment = String.join(", ", result.get(1).get("comment"));
resComment = !Objects.equals(originalComment, "") ? String.format("%s, %s", originalComment, addComment) : addComment; String allComment = !Objects.equals(originalComment, "") ? String.format("%s, %s", originalComment, addComment) : addComment;
resComment = mergeComment(allComment);
messageInfo.setComment(resComment); messageInfo.setComment(resComment);
} }
String endComment = resComment.isEmpty() ? originalComment : resComment; String endComment = resComment.isEmpty() ? originalComment : resComment;
String endColor = resColor.isEmpty() ? originalColor : resColor; String endColor = resColor.isEmpty() ? originalColor : resColor;
if (!messageIsRequest && !endComment.isEmpty() && !endColor.isEmpty()) { if (!messageIsRequest && !Objects.equals(endComment, "") && !Objects.equals(endColor, "")) {
messagePanel.add(messageInfo, endComment, String.valueOf(content.length), endColor); messagePanel.add(messageInfo, endComment, String.valueOf(content.length), endColor);
} }
} }
} }
private String mergeComment(String comment) {
if (!comment.contains(",")) {
return comment;
}
Map<String, Integer> itemCounts = new HashMap<>();
String[] items = comment.split(", ");
for (String item : items) {
if (item.contains("(") && item.contains(")")) {
int openParenIndex = item.lastIndexOf("(");
int closeParenIndex = item.lastIndexOf(")");
String itemName = item.substring(0, openParenIndex).trim();
int count = Integer.parseInt(item.substring(openParenIndex + 1, closeParenIndex).trim());
itemCounts.put(itemName, itemCounts.getOrDefault(itemName, 0) + count);
} else {
itemCounts.put(item, 0);
}
}
StringBuilder mergedItems = new StringBuilder();
for (Map.Entry<String, Integer> entry : itemCounts.entrySet()) {
String itemName = entry.getKey();
int count = entry.getValue();
if (count != 0) {
mergedItems.append(itemName).append(" (").append(count).append("), ");
}
}
return mergedItems.substring(0, mergedItems.length() - 2);
}
class MarkInfoTab implements IMessageEditorTab { class MarkInfoTab implements IMessageEditorTab {
private final JTabbedPane jTabbedPane = new JTabbedPane(); private final JTabbedPane jTabbedPane = new JTabbedPane();
private JTable jTable = new JTable(); private JTable jTable = new JTable();
@@ -168,8 +245,8 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
@Override @Override
public boolean isEnabled(byte[] content, boolean isRequest) { public boolean isEnabled(byte[] content, boolean isRequest) {
String c = new String(content, StandardCharsets.UTF_8).intern();
List<Map<String, String>> result = null; List<Map<String, String>> result = null;
try { try {
result = messageProcessor.processMessage(helpers, content, isRequest, false, ""); result = messageProcessor.processMessage(helpers, content, isRequest, false, "");
} catch (NoSuchAlgorithmException e) { } catch (NoSuchAlgorithmException e) {
@@ -219,7 +296,6 @@ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEdito
*/ */
@Override @Override
public void setMessage(byte[] content, boolean isRequest) { public void setMessage(byte[] content, boolean isRequest) {
String c = new String(content, StandardCharsets.UTF_8).intern();
if (content.length > 0) { if (content.length > 0) {
if (isRequest) { if (isRequest) {
makeTable(extractRequestMap); makeTable(extractRequestMap);

View File

@@ -1,5 +1,6 @@
package burp.config; package burp.config;
import burp.BurpExtender;
import burp.rule.utils.RuleTool; import burp.rule.utils.RuleTool;
import burp.rule.utils.YamlTool; import burp.rule.utils.YamlTool;
import java.io.*; import java.io.*;
@@ -19,7 +20,7 @@ import org.yaml.snakeyaml.Yaml;
public class ConfigLoader { public class ConfigLoader {
private static final Yaml yaml = YamlTool.newStandardYaml(); private static final Yaml yaml = YamlTool.newStandardYaml();
private static final String HaEConfigPath = String.format("%s/.config/HaE", System.getProperty("user.home")); private static final String HaEConfigPath = determineConfigPath();
private static final String RulesFilePath = String.format("%s/%s", HaEConfigPath, "Rules.yml"); private static final String RulesFilePath = String.format("%s/%s", HaEConfigPath, "Rules.yml");
private static final String ConfigFilePath = String.format("%s/%s", HaEConfigPath, "Config.yml"); private static final String ConfigFilePath = String.format("%s/%s", HaEConfigPath, "Config.yml");
@@ -31,44 +32,66 @@ public class ConfigLoader {
} }
File configFilePath = new File(ConfigFilePath); File configFilePath = new File(ConfigFilePath);
if (!(configFilePath.exists() && configFilePath.isFile())) { if (!(configFilePath.exists() && configFilePath.isFile())) {
initConfig(); initConfig();
initRules();
}
ConfigEntry.globalRules = ConfigLoader.getRules();
} }
public void initConfig() { File rulesFilePath = new File(RulesFilePath);
if (!(rulesFilePath.exists() && rulesFilePath.isFile())) {
initRules();
}
ConfigEntry.globalRules = getRules();
}
private static String determineConfigPath() {
// 优先级1用户根目录
String userConfigPath = String.format("%s/.config/HaE", System.getProperty("user.home"));
if (isValidConfigPath(userConfigPath)) {
return userConfigPath;
}
// 优先级2Jar包所在目录
String jarPath = BurpExtender.callbacks.getExtensionFilename();
String jarDirectory = new File(jarPath).getParent();
String jarConfigPath = String.format("%s/.config/HaE", jarDirectory);
if (isValidConfigPath(jarConfigPath)) {
return jarConfigPath;
}
return userConfigPath;
}
private static boolean isValidConfigPath(String configPath) {
File configPathFile = new File(configPath);
return configPathFile.exists() && configPathFile.isDirectory();
}
public static void initConfig() {
Map<String, Object> r = new LinkedHashMap<>(); Map<String, Object> r = new LinkedHashMap<>();
r.put("rulesPath", RulesFilePath);
r.put("excludeSuffix", getExcludeSuffix()); r.put("excludeSuffix", getExcludeSuffix());
try { try {
Writer ws = new OutputStreamWriter(Files.newOutputStream(Paths.get(ConfigFilePath)), StandardCharsets.UTF_8); Writer ws = new OutputStreamWriter(Files.newOutputStream(Paths.get(ConfigFilePath)), StandardCharsets.UTF_8);
yaml.dump(r, ws); yaml.dump(r, ws);
ws.close();
} catch (Exception ex) { } catch (Exception ex) {
ex.printStackTrace(); ex.printStackTrace();
} }
} }
public void initRules() { public static void initRules() {
RuleTool rt = new RuleTool(RulesFilePath); RuleTool rt = new RuleTool(RulesFilePath);
rt.getRulesFromSite(); rt.getRulesFromSite();
} }
public static String getRulesFilePath() { public static String getRulesFilePath() {
try {
Map<String, Object> r = YamlTool.loadYaml(ConfigFilePath);
return r.get("rulesPath").toString();
} catch (Exception e) {
e.printStackTrace();
return RulesFilePath; return RulesFilePath;
} }
}
public String getExcludeSuffix(){ public static String getExcludeSuffix(){
String excludeSuffix = ""; String excludeSuffix = "";
File yamlSetting = new File(ConfigFilePath); File yamlSetting = new File(ConfigFilePath);
if (yamlSetting.exists() && yamlSetting.isFile()) { if (yamlSetting.exists() && yamlSetting.isFile()) {
try { try {
InputStream inorder = Files.newInputStream(Paths.get(ConfigFilePath)); InputStream inorder = Files.newInputStream(Paths.get(ConfigFilePath));
@@ -81,6 +104,7 @@ public class ConfigLoader {
} else { } else {
excludeSuffix = ConfigEntry.excludeSuffix; excludeSuffix = ConfigEntry.excludeSuffix;
} }
return excludeSuffix; return excludeSuffix;
} }
@@ -112,20 +136,18 @@ public class ConfigLoader {
resRule.put(groupFields.get("group").toString(), dataArray); resRule.put(groupFields.get("group").toString(), dataArray);
} }
} }
return resRule; return resRule;
} }
public void setExcludeSuffix(String excludeSuffix){ public static void setExcludeSuffix(String excludeSuffix){
Map<String,Object> r = new LinkedHashMap<>(); Map<String,Object> r = new LinkedHashMap<>();
r.put("rulesPath", getRulesFilePath());
r.put("excludeSuffix", excludeSuffix); r.put("excludeSuffix", excludeSuffix);
try{ try{
Writer ws = new OutputStreamWriter(Files.newOutputStream(Paths.get(RulesFilePath)), StandardCharsets.UTF_8); Writer ws = new OutputStreamWriter(Files.newOutputStream(Paths.get(RulesFilePath)), StandardCharsets.UTF_8);
yaml.dump(r, ws); yaml.dump(r, ws);
ws.close();
}catch (Exception ex){ }catch (Exception ex){
ex.printStackTrace(); ex.printStackTrace();
} }
} }
} }

View File

@@ -1,5 +1,6 @@
package burp.core.processor; package burp.core.processor;
import burp.BurpExtender;
import burp.core.GlobalCachePool; import burp.core.GlobalCachePool;
import burp.core.utils.HashCalculator; import burp.core.utils.HashCalculator;
import burp.core.utils.MatchTool; import burp.core.utils.MatchTool;
@@ -11,12 +12,8 @@ import dk.brics.automaton.RegExp;
import dk.brics.automaton.RunAutomaton; import dk.brics.automaton.RunAutomaton;
import java.nio.charset.StandardCharsets; import java.nio.charset.StandardCharsets;
import java.security.NoSuchAlgorithmException; import java.security.NoSuchAlgorithmException;
import java.util.Arrays; import java.util.*;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.ArrayList;
import java.util.List;
import jregex.Matcher; import jregex.Matcher;
import jregex.Pattern; import jregex.Pattern;
@@ -52,7 +49,7 @@ public class DataProcessingUnit {
public Map<String, Map<String, Object>> matchContentByRegex(byte[] content, String headers, byte[] body, String scopeString, String host) public Map<String, Map<String, Object>> matchContentByRegex(byte[] content, String headers, byte[] body, String scopeString, String host)
throws NoSuchAlgorithmException { throws NoSuchAlgorithmException {
// 先从池里判断是否有已经匹配好的结果 // 先从缓存池里判断是否有已经匹配好的结果
String messageIndex = HashCalculator.calculateHash(content); String messageIndex = HashCalculator.calculateHash(content);
Map<String, Map<String, Object>> map = GlobalCachePool.getFromCache(messageIndex); Map<String, Map<String, Object>> map = GlobalCachePool.getFromCache(messageIndex);
if (map != null) { if (map != null) {
@@ -82,7 +79,7 @@ public class DataProcessingUnit {
case "any": case "any":
case "request": case "request":
case "response": case "response":
matchContent = new String(content, StandardCharsets.UTF_8).intern(); matchContent = new String(content, StandardCharsets.UTF_8);
break; break;
case "any header": case "any header":
case "request header": case "request header":
@@ -92,7 +89,7 @@ public class DataProcessingUnit {
case "any body": case "any body":
case "request body": case "request body":
case "response body": case "response body":
matchContent = new String(body, StandardCharsets.UTF_8).intern(); matchContent = new String(body, StandardCharsets.UTF_8);
break; break;
default: default:
break; break;
@@ -136,9 +133,8 @@ public class DataProcessingUnit {
String dataStr = String.join("\n", result); String dataStr = String.join("\n", result);
tmpMap.put("data", dataStr); tmpMap.put("data", dataStr);
finalMap.put(nameAndSize, tmpMap); finalMap.put(nameAndSize, tmpMap);
// 添加到全局变量中便于Databoard检索 // 添加到全局变量中便于Databoard检索
if (!host.isEmpty()) { if (!Objects.equals(host, "")) {
List<String> dataList = Arrays.asList(dataStr.split("\n")); List<String> dataList = Arrays.asList(dataStr.split("\n"));
if (ConfigEntry.globalDataMap.containsKey(host)) { if (ConfigEntry.globalDataMap.containsKey(host)) {
Map<String, List<String>> gRuleMap = new HashMap<>(ConfigEntry.globalDataMap.get(host)); Map<String, List<String>> gRuleMap = new HashMap<>(ConfigEntry.globalDataMap.get(host));

View File

@@ -1,5 +1,7 @@
package burp.core.utils; package burp.core.utils;
import burp.BurpExtender;
import java.security.MessageDigest; import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException; import java.security.NoSuchAlgorithmException;

View File

@@ -9,11 +9,8 @@ import burp.config.ConfigLoader;
*/ */
public class MatchTool { public class MatchTool {
// 匹配后缀
ConfigLoader configLoader = new ConfigLoader();
public boolean matchUrlSuffix(String str) { public boolean matchUrlSuffix(String str) {
Pattern pattern = new Pattern(String.format("[\\w]+[\\.](%s)", configLoader.getExcludeSuffix()), REFlags.IGNORE_CASE); Pattern pattern = new Pattern(String.format("[\\w]+[\\.](%s)", ConfigLoader.getExcludeSuffix()), REFlags.IGNORE_CASE);
jregex.Matcher matcher = pattern.matcher(str); jregex.Matcher matcher = pattern.matcher(str);
return matcher.find(); return matcher.find();
} }

View File

@@ -1,9 +1,11 @@
package burp.rule.utils; package burp.rule.utils;
import com.squareup.okhttp.OkHttpClient; import burp.*;
import com.squareup.okhttp.Request; import burp.config.ConfigEntry;
import com.squareup.okhttp.Response; import burp.config.ConfigLoader;
import java.io.FileOutputStream; import java.io.FileOutputStream;
import java.net.URL;
import java.util.Arrays;
import javax.swing.JOptionPane; import javax.swing.JOptionPane;
/** /**
@@ -11,25 +13,42 @@ import javax.swing.JOptionPane;
*/ */
public class RuleTool { public class RuleTool {
private String rulesFilePath; private String rulesFilePath;
private boolean isSuccess;
public RuleTool(String rulesFilePath) { public RuleTool(String rulesFilePath) {
this.rulesFilePath = rulesFilePath; this.rulesFilePath = rulesFilePath;
} }
public void getRulesFromSite() { public void getRulesFromSite() {
String url = "https://cdn.jsdelivr.net/gh/gh0stkey/HaE@gh-pages/Rules.yml"; // 以独立线程使用BurpSuite官方请求接口获取规则
OkHttpClient httpClient = new OkHttpClient(); Thread t = new Thread(()->{
Request httpRequest = new Request.Builder().url(url).get().build();
try { try {
Response httpResponse = httpClient.newCall(httpRequest).execute(); URL url = new URL("https://cdn.jsdelivr.net/gh/gh0stkey/HaE@gh-pages/Rules.yml");
// 获取官方规则文件,在线更新写入 IHttpService iHttpService = BurpExtender.helpers.buildHttpService(url.getHost(), 443, true);
IHttpRequestResponse iHttpRequestResponse = BurpExtender.callbacks.makeHttpRequest(iHttpService, BurpExtender.helpers.buildHttpRequest(url));
byte[] responseByte = iHttpRequestResponse.getResponse();
IResponseInfo iResponseInfo = BurpExtender.helpers.analyzeResponse(responseByte);
int bodyOffset = iResponseInfo.getBodyOffset();
byte[] responseBodyByte = Arrays.copyOfRange(responseByte, bodyOffset, responseByte.length);
FileOutputStream fileOutputStream = new FileOutputStream(this.rulesFilePath); FileOutputStream fileOutputStream = new FileOutputStream(this.rulesFilePath);
fileOutputStream.write(httpResponse.body().bytes()); fileOutputStream.write(responseBodyByte);
JOptionPane.showMessageDialog(null, "Config file updated successfully!", "Error", fileOutputStream.close();
JOptionPane.INFORMATION_MESSAGE); isSuccess = true;
} catch (Exception ignored) { } catch (Exception e) {
JOptionPane.showMessageDialog(null, "Please check your network!", "Error", isSuccess = false;
JOptionPane.ERROR_MESSAGE); }
});
t.start();
try {
t.join(10000);
} catch (Exception e) {
isSuccess = false;
}
if (isSuccess) {
JOptionPane.showMessageDialog(null, "Rules update successfully!", "Info", JOptionPane.INFORMATION_MESSAGE);
} else {
JOptionPane.showMessageDialog(null, "Rule update failed, please check the network!", "Error", JOptionPane.ERROR_MESSAGE);
} }
} }
} }

View File

@@ -1,6 +1,9 @@
package burp.rule.utils; package burp.rule.utils;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.util.Map; import java.util.Map;
import org.yaml.snakeyaml.DumperOptions; import org.yaml.snakeyaml.DumperOptions;
import org.yaml.snakeyaml.Yaml; import org.yaml.snakeyaml.Yaml;
import java.io.FileInputStream; import java.io.FileInputStream;
@@ -23,13 +26,11 @@ public class YamlTool {
public static Map<String, Object> loadYaml(String filePath) { public static Map<String, Object> loadYaml(String filePath) {
try { try {
InputStream inputStream = new FileInputStream(filePath); InputStream inputStream = Files.newInputStream(Paths.get(filePath));
Yaml yaml = newStandardYaml(); return newStandardYaml().load(inputStream);
return yaml.load(inputStream); } catch (Exception e) {
} catch (FileNotFoundException e) {
e.printStackTrace(); e.printStackTrace();
return null; return null;
} }
} }
} }

View File

@@ -3,7 +3,6 @@ package burp.ui;
import burp.config.ConfigEntry; import burp.config.ConfigEntry;
import burp.config.ConfigLoader; import burp.config.ConfigLoader;
import burp.rule.RuleProcessor; import burp.rule.RuleProcessor;
import burp.rule.utils.RuleTool;
import burp.ui.board.Databoard; import burp.ui.board.Databoard;
import burp.ui.board.MessagePanel; import burp.ui.board.MessagePanel;
import burp.ui.rule.RulePane; import burp.ui.rule.RulePane;
@@ -21,12 +20,9 @@ import java.util.Map;
*/ */
public class MainUI extends JPanel { public class MainUI extends JPanel {
private final ConfigLoader loadConn = new ConfigLoader();
private MessagePanel messagePanel;
public MainUI(MessagePanel messagePanel) { public MainUI(MessagePanel messagePanel) {
this.messagePanel = messagePanel; databoardPanel = new Databoard(messagePanel);
databoardPanel = new Databoard(this.messagePanel);
initComponents(); initComponents();
} }
@@ -41,13 +37,9 @@ public class MainUI extends JPanel {
private void onlineUpdateActionPerformed(ActionEvent e) { private void onlineUpdateActionPerformed(ActionEvent e) {
// 添加提示框防止用户误触导致配置更新 // 添加提示框防止用户误触导致配置更新
int retCode = JOptionPane.showConfirmDialog(null, "Do you want to update config?", "Info", int retCode = JOptionPane.showConfirmDialog(null, "Do you want to update rules?", "Info", JOptionPane.YES_NO_OPTION);
JOptionPane.YES_NO_CANCEL_OPTION);
if (retCode == JOptionPane.YES_OPTION) { if (retCode == JOptionPane.YES_OPTION) {
String rulesFilePath = rulesPathTextField.getText(); ConfigLoader.initRules();
RuleTool rt = new RuleTool(rulesFilePath);
rt.getRulesFromSite();
new ConfigLoader();
reloadRule(); reloadRule();
} }
} }
@@ -61,7 +53,6 @@ public class MainUI extends JPanel {
i, i,
new RulePane(rules.get(i), ruleTabbedPane) new RulePane(rules.get(i), ruleTabbedPane)
) )
); );
ruleTabbedPane.addTab("...", new JLabel()); ruleTabbedPane.addTab("...", new JLabel());
ruleSwitch.setListen(true); ruleSwitch.setListen(true);
@@ -72,9 +63,9 @@ public class MainUI extends JPanel {
} }
private void excludeSuffixSaveActionPerformed(ActionEvent e) { private void excludeSuffixSaveActionPerformed(ActionEvent e) {
ConfigLoader loadCon = new ConfigLoader(); ConfigLoader.setExcludeSuffix(excludeSuffixTextField.getText());
loadCon.setExcludeSuffix(excludeSuffixTextField.getText());
} }
private void initComponents() { private void initComponents() {
JTabbedPane mainTabbedPane = new JTabbedPane(); JTabbedPane mainTabbedPane = new JTabbedPane();
ruleTabbedPane = new JTabbedPane(); ruleTabbedPane = new JTabbedPane();
@@ -154,7 +145,7 @@ public class MainUI extends JPanel {
ruleTabbedPane.addTab("...", new JLabel()); ruleTabbedPane.addTab("...", new JLabel());
rulesPathTextField.setText(ConfigLoader.getRulesFilePath()); rulesPathTextField.setText(ConfigLoader.getRulesFilePath());
excludeSuffixTextField.setText(loadConn.getExcludeSuffix()); excludeSuffixTextField.setText(ConfigLoader.getExcludeSuffix());
ruleSwitch = new TabTitleEditListener(ruleTabbedPane); ruleSwitch = new TabTitleEditListener(ruleTabbedPane);
ruleTabbedPane.addChangeListener(ruleSwitch); ruleTabbedPane.addChangeListener(ruleSwitch);
ruleTabbedPane.addMouseListener(ruleSwitch); ruleTabbedPane.addMouseListener(ruleSwitch);

View File

@@ -8,23 +8,24 @@ import java.util.Map;
import javax.swing.JTable; import javax.swing.JTable;
import javax.swing.table.DefaultTableCellRenderer; import javax.swing.table.DefaultTableCellRenderer;
public class CustomTableCellRenderer extends DefaultTableCellRenderer { public class ColorRenderer extends DefaultTableCellRenderer {
private List<LogEntry> log; private List<LogEntry> log;
private Map<String, Color> colorMap = new HashMap<>(); private Map<String, Color> colorMap = new HashMap<>();
private JTable table; // 保存对表格的引用 private JTable table; // 保存对表格的引用
public CustomTableCellRenderer(List<LogEntry> log, JTable table) { public ColorRenderer(List<LogEntry> log, JTable table) {
this.log = log; this.log = log;
this.colorMap.put("red", Color.RED); // 与BurpSuite的颜色保持一致
this.colorMap.put("orange", Color.ORANGE); this.colorMap.put("red", new Color(0xFF, 0x64, 0x64));
this.colorMap.put("yellow", Color.YELLOW); this.colorMap.put("orange", new Color(0xFF, 0xC8, 0x64));
this.colorMap.put("green", Color.GREEN); this.colorMap.put("yellow", new Color(0xFF, 0xFF, 0x64));
this.colorMap.put("cyan", Color.CYAN); this.colorMap.put("green", new Color(0x64, 0xFF, 0x64));
this.colorMap.put("blue", Color.BLUE); this.colorMap.put("cyan", new Color(0x64, 0xFF, 0xFF));
this.colorMap.put("pink", Color.PINK); this.colorMap.put("blue", new Color(0x64, 0x64, 0xFF));
this.colorMap.put("magenta", Color.MAGENTA); this.colorMap.put("pink", new Color(0xFF, 0xC8, 0xC8));
this.colorMap.put("gray", Color.GRAY); this.colorMap.put("magenta", new Color(0xFF, 0x64, 0xFF));
this.colorMap.put("gray", new Color(0xB4, 0xB4, 0xB4));
this.table = table; this.table = table;
} }
@@ -40,13 +41,15 @@ public class CustomTableCellRenderer extends DefaultTableCellRenderer {
Color color = colorMap.get(colorByLog); Color color = colorMap.get(colorByLog);
if (isSelected) { if (isSelected) {
// 如果行被选中设置阴影颜色 // 通过更改RGB颜色来达成阴影效果
component.setBackground(new Color(173, 216, 230)); // Light Blue component.setBackground(new Color(color.getRed()-0x20, color.getGreen()-0x20, color.getBlue()-0x20));
} else { } else {
// 否则使用原始颜色 // 否则使用原始颜色
component.setBackground(color); component.setBackground(color);
} }
component.setForeground(Color.BLACK);
return component; return component;
} }

View File

@@ -3,9 +3,8 @@ package burp.ui.board;
import burp.config.ConfigEntry; import burp.config.ConfigEntry;
import burp.core.utils.StringHelper; import burp.core.utils.StringHelper;
import burp.ui.board.MessagePanel.Table; import burp.ui.board.MessagePanel.Table;
import java.util.HashMap;
import java.util.HashSet; import java.util.*;
import java.util.List;
import javax.swing.event.ChangeEvent; import javax.swing.event.ChangeEvent;
import javax.swing.event.ChangeListener; import javax.swing.event.ChangeListener;
import javax.swing.table.DefaultTableModel; import javax.swing.table.DefaultTableModel;
@@ -15,8 +14,7 @@ import javax.swing.table.TableModel;
import javax.swing.table.TableRowSorter; import javax.swing.table.TableRowSorter;
import java.awt.*; import java.awt.*;
import java.awt.event.*; import java.awt.event.*;
import java.util.ArrayList; import java.util.List;
import java.util.Map;
import javax.swing.*; import javax.swing.*;
import javax.swing.event.DocumentEvent; import javax.swing.event.DocumentEvent;
import javax.swing.event.DocumentListener; import javax.swing.event.DocumentListener;
@@ -35,6 +33,8 @@ public class Databoard extends JPanel {
private JSplitPane splitPane; private JSplitPane splitPane;
private MessagePanel messagePanel; private MessagePanel messagePanel;
private Table table; private Table table;
DefaultComboBoxModel comboBoxModel = new DefaultComboBoxModel();
JComboBox hostComboBox = new JComboBox(comboBoxModel);
public Databoard(MessagePanel messagePanel) { public Databoard(MessagePanel messagePanel) {
this.messagePanel = messagePanel; this.messagePanel = messagePanel;
@@ -48,6 +48,9 @@ public class Databoard extends JPanel {
} }
private void clearActionPerformed(ActionEvent e) { private void clearActionPerformed(ActionEvent e) {
int retCode = JOptionPane.showConfirmDialog(null, "Do you want to clear data?", "Info",
JOptionPane.YES_NO_OPTION);
if (retCode == JOptionPane.YES_OPTION) {
cleanUI(); cleanUI();
String host = hostTextField.getText(); String host = hostTextField.getText();
@@ -61,7 +64,7 @@ public class Databoard extends JPanel {
messagePanel.deleteByHost(cleanedHost); messagePanel.deleteByHost(cleanedHost);
} }
}
private void initComponents() { private void initComponents() {
// JFormDesigner - Component initialization - DO NOT MODIFY //GEN-BEGIN:initComponents // JFormDesigner - Component initialization - DO NOT MODIFY //GEN-BEGIN:initComponents
@@ -99,6 +102,23 @@ public class Databoard extends JPanel {
GridBagConstraints.CENTER, GridBagConstraints.BOTH, GridBagConstraints.CENTER, GridBagConstraints.BOTH,
new Insets(8, 0, 5, 5), 0, 0)); new Insets(8, 0, 5, 5), 0, 0));
hostTextField.setLayout(new BorderLayout());
hostTextField.add(hostComboBox, BorderLayout.SOUTH);
hostComboBox.setMaximumRowCount(5);
hostComboBox.setPreferredSize(new Dimension(super.getPreferredSize().width, 0));
// 由于主题切换造成的UI组件重绘而自定义组件没有正确地与之同步因此需要事件监听来进行同步
UIManager.addPropertyChangeListener(evt -> {
if ("lookAndFeel".equals(evt.getPropertyName())) {
SwingUtilities.invokeLater(() -> {
hostTextField.remove(hostComboBox);
hostTextField.add(hostComboBox, BorderLayout.SOUTH);
hostTextField.revalidate();
hostTextField.repaint();
});
}
});
setAutoMatch(); setAutoMatch();
} }
@@ -110,15 +130,6 @@ public class Databoard extends JPanel {
* 设置输入自动匹配 * 设置输入自动匹配
*/ */
private void setAutoMatch() { private void setAutoMatch() {
final DefaultComboBoxModel comboBoxModel = new DefaultComboBoxModel();
final JComboBox hostComboBox = new JComboBox(comboBoxModel) {
@Override
public Dimension getPreferredSize() {
return new Dimension(super.getPreferredSize().width, 0);
}
};
isMatchHost = false; isMatchHost = false;
for (String host : getHostByList()) { for (String host : getHostByList()) {
@@ -130,8 +141,9 @@ public class Databoard extends JPanel {
hostComboBox.addActionListener(e -> { hostComboBox.addActionListener(e -> {
if (!isMatchHost) { if (!isMatchHost) {
if (hostComboBox.getSelectedItem() != null) { if (hostComboBox.getSelectedItem() != null) {
hostTextField.setText(hostComboBox.getSelectedItem().toString()); String selectedHost = hostComboBox.getSelectedItem().toString();
populateTabbedPaneByHost(hostComboBox); hostTextField.setText(selectedHost);
populateTabbedPaneByHost(selectedHost);
} }
} }
}); });
@@ -154,7 +166,7 @@ public class Databoard extends JPanel {
if (keyCode == KeyEvent.VK_ENTER) { if (keyCode == KeyEvent.VK_ENTER) {
String selectedItem = hostComboBox.getSelectedItem().toString(); String selectedItem = hostComboBox.getSelectedItem().toString();
hostTextField.setText(selectedItem); hostTextField.setText(selectedItem);
populateTabbedPaneByHost(hostComboBox); populateTabbedPaneByHost(selectedItem);
hostComboBox.setPopupVisible(false); hostComboBox.setPopupVisible(false);
return; return;
} }
@@ -172,7 +184,6 @@ public class Databoard extends JPanel {
@Override @Override
public void insertUpdate(DocumentEvent e) { public void insertUpdate(DocumentEvent e) {
updateList(); updateList();
} }
@Override @Override
@@ -193,9 +204,9 @@ public class Databoard extends JPanel {
for (String host : getHostByList()) { for (String host : getHostByList()) {
String lowerCaseHost = host.toLowerCase(); String lowerCaseHost = host.toLowerCase();
if (lowerCaseHost.contains(input)) { if (lowerCaseHost.contains(input)) {
if (host.length() == input.length()){ if (lowerCaseHost.equals(input)) {
comboBoxModel.insertElementAt(host,0); comboBoxModel.insertElementAt(lowerCaseHost, 0);
comboBoxModel.setSelectedItem(host); comboBoxModel.setSelectedItem(lowerCaseHost);
} else { } else {
comboBoxModel.addElement(host); comboBoxModel.addElement(host);
} }
@@ -206,9 +217,6 @@ public class Databoard extends JPanel {
isMatchHost = false; isMatchHost = false;
} }
}); });
hostTextField.setLayout(new BorderLayout());
hostTextField.add(hostComboBox, BorderLayout.SOUTH);
} }
private void applyHostFilter(String filterText) { private void applyHostFilter(String filterText) {
@@ -225,9 +233,8 @@ public class Databoard extends JPanel {
messagePanel.applyHostFilter(filterText); messagePanel.applyHostFilter(filterText);
} }
private void populateTabbedPaneByHost(JComboBox<String> hostComboBox) { private void populateTabbedPaneByHost(String selectedHost) {
if (hostComboBox.getSelectedItem() != null) { if (!Objects.equals(selectedHost, "")) {
String selectedHost = hostComboBox.getSelectedItem().toString();
Map<String, Map<String, List<String>>> dataMap = ConfigEntry.globalDataMap; Map<String, Map<String, List<String>>> dataMap = ConfigEntry.globalDataMap;
Map<String, List<String>> selectedDataMap; Map<String, List<String>> selectedDataMap;
@@ -281,7 +288,7 @@ public class Databoard extends JPanel {
for (Map.Entry<String, List<String>> entrySet : entry.getValue().entrySet()) { for (Map.Entry<String, List<String>> entrySet : entry.getValue().entrySet()) {
Thread t = new Thread(() -> { Thread t = new Thread(() -> {
String tabTitle = String.format("%s (%s)", entrySet.getKey(), entrySet.getValue().size()); String tabTitle = String.format("%s (%s)", entrySet.getKey(), entrySet.getValue().size());
newTabbedPane.addTab(tabTitle, new JScrollPane(new DataTable(entrySet.getKey(), entrySet.getValue()))); newTabbedPane.addTab(tabTitle, new DataTable(entrySet.getKey(), entrySet.getValue()));
dataTabbedPaneA.addTab(entry.getKey(), newTabbedPane); dataTabbedPaneA.addTab(entry.getKey(), newTabbedPane);
}); });
t.start(); t.start();
@@ -299,7 +306,7 @@ public class Databoard extends JPanel {
splitPane.setLeftComponent(dataTabbedPaneB); splitPane.setLeftComponent(dataTabbedPaneB);
for (Map.Entry<String, List<String>> entry : selectedDataMap.entrySet()) { for (Map.Entry<String, List<String>> entry : selectedDataMap.entrySet()) {
String tabTitle = String.format("%s (%s)", entry.getKey(), entry.getValue().size()); String tabTitle = String.format("%s (%s)", entry.getKey(), entry.getValue().size());
dataTabbedPaneB.addTab(tabTitle, new JScrollPane(new DataTable(entry.getKey(), entry.getValue()))); dataTabbedPaneB.addTab(tabTitle, new DataTable(entry.getKey(), entry.getValue()));
} }
} }
@@ -328,31 +335,100 @@ public class Databoard extends JPanel {
} }
} }
class DataTable extends JPanel {
private final JTable table;
private final DefaultTableModel model;
private final JTextField searchField;
private TableRowSorter<DefaultTableModel> sorter;
class DataTable extends JTable {
public DataTable(String tableName, List<String> list) { public DataTable(String tableName, List<String> list) {
DefaultTableModel model = new DefaultTableModel(); model = new DefaultTableModel();
Object[][] data = new Object[list.size()][1]; table = new JTable(model);
for (int x = 0; x < list.size(); x++) { sorter = new TableRowSorter<>(model);
data[x][0] = list.get(x);
}
model.setDataVector(data, new Object[]{"Information"});
setAutoCreateRowSorter(true);
setModel(model);
setDefaultEditor(Object.class, null);
addMouseListener(new MouseAdapter() { table.setRowSorter(sorter);
table.setDefaultEditor(Object.class, null);
// 表格内容双击事件
table.addMouseListener(new MouseAdapter() {
@Override @Override
public void mouseClicked(MouseEvent e) { public void mouseClicked(MouseEvent e) {
if (e.getClickCount() == 2) { if (e.getClickCount() == 2) {
int selectedRow = getSelectedRow(); int selectedRow = table.getSelectedRow();
if (selectedRow != -1) { if (selectedRow != -1) {
String rowData = getValueAt(selectedRow, 0).toString(); String rowData = table.getValueAt(selectedRow, 0).toString();
messagePanel.applyMessageFilter(tableName, rowData); messagePanel.applyMessageFilter(tableName, rowData);
} }
} }
} }
}); });
model.addColumn("Information");
for (String item : list) {
model.addRow(new Object[]{item});
}
String defaultText = "Search";
searchField = new JTextField(defaultText);
// 设置灰色默认文本Search
searchField.setForeground(Color.GRAY);
searchField.addFocusListener(new FocusListener() {
@Override
public void focusGained(FocusEvent e) {
if (searchField.getText().equals(defaultText)) {
searchField.setText("");
searchField.setForeground(Color.BLACK);
}
}
@Override
public void focusLost(FocusEvent e) {
if (searchField.getText().isEmpty()) {
searchField.setForeground(Color.GRAY);
searchField.setText(defaultText);
}
}
});
// 监听输入框内容输入、更新、删除
searchField.getDocument().addDocumentListener(new DocumentListener() {
@Override
public void insertUpdate(DocumentEvent e) {
performSearch();
}
@Override
public void removeUpdate(DocumentEvent e) {
performSearch();
}
@Override
public void changedUpdate(DocumentEvent e) {
performSearch();
}
private void performSearch() {
// 通过字体颜色来判断是否可以进行过滤
if (searchField.getForeground() == Color.BLACK) {
String searchText = searchField.getText();
if (sorter == null) {
sorter = new TableRowSorter<>(model);
table.setRowSorter(sorter);
}
RowFilter<DefaultTableModel, Object> rowFilter = RowFilter.regexFilter(String.format("%s%s", "(?i)", searchText), 0);
sorter.setRowFilter(rowFilter);
}
}
});
// 设置布局
JScrollPane scrollPane = new JScrollPane(table);
setLayout(new BorderLayout(0, 5));
add(scrollPane, BorderLayout.CENTER);
add(searchField, BorderLayout.SOUTH);
} }
} }
} }

View File

@@ -9,16 +9,18 @@ public class LogEntry {
private final IHttpRequestResponsePersisted requestResponse; private final IHttpRequestResponsePersisted requestResponse;
private final URL url; private final URL url;
private final String length; private final String length;
private final String status;
private final String color; private final String color;
private final String method; private final String method;
LogEntry(IHttpRequestResponsePersisted requestResponse, String method, URL url, String comment, String length, String color) { LogEntry(IHttpRequestResponsePersisted requestResponse, String method, URL url, String comment, String length, String color, String status) {
this.requestResponse = requestResponse; this.requestResponse = requestResponse;
this.method = method; this.method = method;
this.url = url; this.url = url;
this.comment = comment; this.comment = comment;
this.length = length; this.length = length;
this.color = color; this.color = color;
this.status = status;
} }
public String getColor() { public String getColor() {
@@ -41,6 +43,10 @@ public class LogEntry {
return this.method; return this.method;
} }
public String getStatus() {
return this.status;
}
public IHttpRequestResponsePersisted getRequestResponse() { public IHttpRequestResponsePersisted getRequestResponse() {
return this.requestResponse; return this.requestResponse;
} }

View File

@@ -7,12 +7,21 @@ import burp.IHttpRequestResponsePersisted;
import burp.IHttpService; import burp.IHttpService;
import burp.IMessageEditor; import burp.IMessageEditor;
import burp.IMessageEditorController; import burp.IMessageEditorController;
import burp.IRequestInfo;
import burp.config.ConfigEntry; import burp.config.ConfigEntry;
import burp.core.GlobalCachePool;
import burp.core.utils.HashCalculator;
import burp.core.utils.StringHelper; import burp.core.utils.StringHelper;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.security.NoSuchAlgorithmException;
import java.util.ArrayList; import java.util.ArrayList;
import java.util.Arrays; import java.util.Arrays;
import java.util.Comparator; import java.util.Comparator;
import java.util.List; import java.util.List;
import java.util.Map;
import java.util.Objects;
import javax.swing.JScrollPane; import javax.swing.JScrollPane;
import javax.swing.JSplitPane; import javax.swing.JSplitPane;
import javax.swing.JTabbedPane; import javax.swing.JTabbedPane;
@@ -46,12 +55,12 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
splitPane = new JSplitPane(JSplitPane.VERTICAL_SPLIT); splitPane = new JSplitPane(JSplitPane.VERTICAL_SPLIT);
logTable = new Table(MessagePanel.this); logTable = new Table(MessagePanel.this);
logTable.setDefaultRenderer(Object.class, new CustomTableCellRenderer(filteredLog, logTable)); logTable.setDefaultRenderer(Object.class, new ColorRenderer(filteredLog, logTable));
logTable.setAutoCreateRowSorter(true); logTable.setAutoCreateRowSorter(true);
// Length字段根据大小进行排序 // Length字段根据大小进行排序
TableRowSorter<DefaultTableModel> sorter = (TableRowSorter<DefaultTableModel>) logTable.getRowSorter(); TableRowSorter<DefaultTableModel> sorter = (TableRowSorter<DefaultTableModel>) logTable.getRowSorter();
sorter.setComparator(3, new Comparator<String>() { sorter.setComparator(4, new Comparator<String>() {
@Override @Override
public int compare(String s1, String s2) { public int compare(String s1, String s2) {
Integer age1 = Integer.parseInt(s1); Integer age1 = Integer.parseInt(s1);
@@ -60,7 +69,7 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
} }
}); });
// Color字段根据颜色顺序进行排序 // Color字段根据颜色顺序进行排序
sorter.setComparator(4, new Comparator<String>() { sorter.setComparator(5, new Comparator<String>() {
@Override @Override
public int compare(String s1, String s2) { public int compare(String s1, String s2) {
int index1 = getIndex(s1); int index1 = getIndex(s1);
@@ -115,7 +124,7 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
@Override @Override
public int getColumnCount() public int getColumnCount()
{ {
return 5; return 6;
} }
@Override @Override
@@ -130,8 +139,10 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
case 2: case 2:
return "Comment"; return "Comment";
case 3: case 3:
return "Length"; return "Status";
case 4: case 4:
return "Length";
case 5:
return "Color"; return "Color";
default: default:
return ""; return "";
@@ -157,8 +168,10 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
case 2: case 2:
return logEntry.getComment(); return logEntry.getComment();
case 3: case 3:
return logEntry.getLength(); return logEntry.getStatus();
case 4: case 4:
return logEntry.getLength();
case 5:
return logEntry.getColor(); return logEntry.getColor();
default: default:
return ""; return "";
@@ -184,15 +197,18 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
byte[] requestByte = requestResponse.getRequest(); byte[] requestByte = requestResponse.getRequest();
byte[] responseByte = requestResponse.getResponse(); byte[] responseByte = requestResponse.getResponse();
String requestString = new String(requestResponse.getRequest(), StandardCharsets.UTF_8);
String responseString = new String(requestResponse.getResponse(), StandardCharsets.UTF_8);
List<String> requestTmpHeaders = helpers.analyzeRequest(requestByte).getHeaders(); List<String> requestTmpHeaders = helpers.analyzeRequest(requestByte).getHeaders();
byte[] requestHeaders = helpers.stringToBytes(String.join("\n", requestTmpHeaders)); String requestHeaders = new String(String.join("\n", requestTmpHeaders).getBytes(StandardCharsets.UTF_8), StandardCharsets.UTF_8);
int requestBodyOffset = helpers.analyzeRequest(requestByte).getBodyOffset(); int requestBodyOffset = helpers.analyzeRequest(requestByte).getBodyOffset();
byte[] requestBody = Arrays.copyOfRange(requestByte, requestBodyOffset, requestByte.length); String requestBody = new String(Arrays.copyOfRange(requestByte, requestBodyOffset, requestByte.length), StandardCharsets.UTF_8);
List<String> responseTmpHeaders = helpers.analyzeResponse(responseByte).getHeaders(); List<String> responseTmpHeaders = helpers.analyzeResponse(responseByte).getHeaders();
byte[] responseHeaders = helpers.stringToBytes(String.join("\n", responseTmpHeaders)); String responseHeaders = new String(String.join("\n", responseTmpHeaders).getBytes(StandardCharsets.UTF_8), StandardCharsets.UTF_8);
int responseBodyOffset = helpers.analyzeResponse(responseByte).getBodyOffset(); int responseBodyOffset = helpers.analyzeResponse(responseByte).getBodyOffset();
byte[] responseBody = Arrays.copyOfRange(responseByte, responseBodyOffset, responseByte.length); String responseBody = new String(Arrays.copyOfRange(responseByte, responseBodyOffset, responseByte.length), StandardCharsets.UTF_8);
final boolean[] isMatched = {false}; // 标志变量,表示是否满足过滤条件 final boolean[] isMatched = {false}; // 标志变量,表示是否满足过滤条件
@@ -205,31 +221,31 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
switch (scope) { switch (scope) {
case "any": case "any":
match = helpers.indexOf(requestByte, helpers.stringToBytes(filterText), true, 0, requestByte.length) != -1 || helpers.indexOf(responseByte, helpers.stringToBytes(filterText), true, 0, responseByte.length) != -1; match = requestString.contains(filterText) || responseString.contains(filterText);
break; break;
case "request": case "request":
match = helpers.indexOf(requestByte, helpers.stringToBytes(filterText), true, 0, requestByte.length) != -1; match = requestString.contains(filterText);
break; break;
case "response": case "response":
match = helpers.indexOf(responseByte, helpers.stringToBytes(filterText), true, 0, responseByte.length) != -1; match = responseString.contains(filterText);
break; break;
case "any header": case "any header":
match = helpers.indexOf(requestHeaders, helpers.stringToBytes(filterText), true, 0, requestHeaders.length) != -1 || helpers.indexOf(responseHeaders, helpers.stringToBytes(filterText), true, 0, responseHeaders.length) != -1; match = requestHeaders.contains(filterText) || responseHeaders.contains(filterText);
break; break;
case "request header": case "request header":
match = helpers.indexOf(requestHeaders, helpers.stringToBytes(filterText), true, 0, requestHeaders.length) != -1; match = requestHeaders.contains(filterText);
break; break;
case "response header": case "response header":
match = helpers.indexOf(responseHeaders, helpers.stringToBytes(filterText), true, 0, responseHeaders.length) != -1; match = responseHeaders.contains(filterText);
break; break;
case "any body": case "any body":
match = helpers.indexOf(requestBody, helpers.stringToBytes(filterText), true, 0, requestBody.length) != -1 || helpers.indexOf(responseBody, helpers.stringToBytes(filterText), true, 0, responseBody.length) != -1; match = requestBody.contains(filterText) || responseBody.contains(filterText);
break; break;
case "request body": case "request body":
match = helpers.indexOf(requestBody, helpers.stringToBytes(filterText), true, 0, requestBody.length) != -1; match = requestBody.contains(filterText);
break; break;
case "response body": case "response body":
match = helpers.indexOf(responseBody, helpers.stringToBytes(filterText), true, 0, responseBody.length) != -1; match = responseBody.contains(filterText);
break; break;
default: default:
break; break;
@@ -291,12 +307,93 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
} }
public void add(IHttpRequestResponse messageInfo, String comment, String length, String color) { public void add(IHttpRequestResponse messageInfo, String comment, String length, String color) {
synchronized(log) synchronized(log) {
{ IRequestInfo iRequestInfo = helpers.analyzeRequest(messageInfo);
LogEntry logEntry = new LogEntry(callbacks.saveBuffersToTempFiles(messageInfo), helpers.analyzeRequest(messageInfo).getMethod(), URL url = iRequestInfo.getUrl();
helpers.analyzeRequest(messageInfo).getUrl(), comment, length, color); String method = iRequestInfo.getMethod();
String status = String.valueOf(helpers.analyzeResponse(messageInfo.getResponse()).getStatusCode());
LogEntry logEntry = new LogEntry(callbacks.saveBuffersToTempFiles(messageInfo), method, url, comment, length, color, status);
try {
// 比较Hash如若存在重复的请求或响应则不放入消息内容里
byte[] reqByteA = messageInfo.getRequest();
byte[] resByteA = messageInfo.getResponse();
boolean isDuplicate = false;
if (log.size() > 0) {
for (LogEntry entry : log) {
IHttpRequestResponsePersisted reqResMessage = entry.getRequestResponse();
byte[] reqByteB = reqResMessage.getRequest();
byte[] resByteB = reqResMessage.getResponse();
try {
// 采用匹配数据结果比对
if (areMapsEqual(getCacheData(reqByteB), getCacheData(reqByteA)) && areMapsEqual(getCacheData(resByteB), getCacheData(resByteA))) {
isDuplicate = true;
break;
}
} catch (Exception e) {
e.printStackTrace();
}
}
}
if (!isDuplicate) {
log.add(logEntry); log.add(logEntry);
} }
} catch (Exception e) {
e.printStackTrace();
}
}
}
private Map<String, Map<String, Object>> getCacheData(byte[] content)
throws NoSuchAlgorithmException {
String hashIndex = HashCalculator.calculateHash(content);
return GlobalCachePool.getFromCache(hashIndex);
}
private boolean areMapsEqual(Map<String, Map<String, Object>> map1, Map<String, Map<String, Object>> map2) {
if (map1.size() != map2.size()) {
return false;
}
for (String key : map1.keySet()) {
if (!map2.containsKey(key)) {
return false;
}
if (!areInnerMapsEqual(map1.get(key), map2.get(key))) {
return false;
}
}
return true;
}
private boolean areInnerMapsEqual(Map<String, Object> innerMap1, Map<String, Object> innerMap2) {
if (innerMap1.size() != innerMap2.size()) {
return false;
}
for (String key : innerMap1.keySet()) {
if (!innerMap2.containsKey(key)) {
return false;
}
Object value1 = innerMap1.get(key);
Object value2 = innerMap2.get(key);
// 如果值是Map则递归对比
if (value1 instanceof Map && value2 instanceof Map) {
if (!areInnerMapsEqual((Map<String, Object>) value1, (Map<String, Object>) value2)) {
return false;
}
} else if (!value1.equals(value2)) {
return false;
}
}
return true;
} }
public class Table extends JTable { public class Table extends JTable {
@@ -309,6 +406,8 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
@Override @Override
public void changeSelection(int row, int col, boolean toggle, boolean extend) { public void changeSelection(int row, int col, boolean toggle, boolean extend) {
super.changeSelection(row, col, toggle, extend);
logEntry = filteredLog.get(convertRowIndexToModel(row)); logEntry = filteredLog.get(convertRowIndexToModel(row));
requestViewer.setMessage("Loading...".getBytes(), true); requestViewer.setMessage("Loading...".getBytes(), true);
responseViewer.setMessage("Loading...".getBytes(), false); responseViewer.setMessage("Loading...".getBytes(), false);
@@ -330,10 +429,9 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
currentWorker = worker; currentWorker = worker;
// 启动后台线程 // 启动后台线程
worker.execute(); worker.execute();
super.changeSelection(row, col, toggle, extend);
} }
private void refreshMessage() { private synchronized void refreshMessage() {
SwingUtilities.invokeLater(() -> { SwingUtilities.invokeLater(() -> {
requestViewer.setMessage(logEntry.getRequestResponse().getRequest(), true); requestViewer.setMessage(logEntry.getRequestResponse().getRequest(), true);
responseViewer.setMessage(logEntry.getRequestResponse().getResponse(), false); responseViewer.setMessage(logEntry.getRequestResponse().getResponse(), false);
@@ -342,4 +440,3 @@ public class MessagePanel extends AbstractTableModel implements IMessageEditorCo
} }
} }

BIN
src/main/resources/logo.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 6.6 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 3.8 KiB