package burp; import burp.action.*; import burp.ui.MainUI; import java.util.Map; import java.util.Objects; import javax.swing.*; import java.awt.*; import java.nio.charset.StandardCharsets; import java.io.PrintWriter; import java.util.ArrayList; import java.util.List; import javax.swing.event.ChangeEvent; import javax.swing.event.ChangeListener; /** * @author EvilChen & 0chencc */ public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEditorTabFactory, ITab { private final MainUI main = new MainUI(); // stdout变成公开属性,便于其他类调用输出调试信息 public static PrintWriter stdout; private IBurpExtenderCallbacks callbacks; private static IExtensionHelpers helpers; GetColorKey gck = new GetColorKey(); UpgradeColor uc = new UpgradeColor(); ProcessMessage pm = new ProcessMessage(); @Override public void registerExtenderCallbacks(final IBurpExtenderCallbacks callbacks) { this.callbacks = callbacks; BurpExtender.helpers = callbacks.getHelpers(); String version = "2.4.7"; callbacks.setExtensionName(String.format("HaE (%s) - Highlighter and Extractor", version)); // 定义输出 stdout = new PrintWriter(callbacks.getStdout(), true); stdout.println("@First Author: EvilChen"); stdout.println("@Second Author: 0chencc"); stdout.println("@Github: https://github.com/gh0stkey/HaE"); // UI SwingUtilities.invokeLater(this::initialize); callbacks.registerHttpListener(BurpExtender.this); callbacks.registerMessageEditorTabFactory(BurpExtender.this); } private void initialize(){ callbacks.customizeUiComponent(main); callbacks.addSuiteTab(BurpExtender.this); } @Override public String getTabCaption(){ return "HaE"; } @Override public Component getUiComponent() { return main; } /** * 使用processHttpMessage用来做Highlighter */ @Override public void processHttpMessage(int toolFlag, boolean messageIsRequest, IHttpRequestResponse messageInfo) { // 判断是否是响应,且该代码作用域为:REPEATER、INTRUDER、PROXY(分别对应toolFlag 64、32、4) if (toolFlag == 64 || toolFlag == 32 || toolFlag == 4) { byte[] content; if (messageIsRequest) { content = messageInfo.getRequest(); } else { content = messageInfo.getResponse(); } IHttpService iHttpService = null; try { iHttpService = messageInfo.getHttpService(); } catch (Exception ignored) { } // 获取请求主机信息 assert iHttpService != null; String host = iHttpService.getHost(); String c = new String(content, StandardCharsets.UTF_8).intern(); List> result = pm.processMessageByContent(helpers, content, messageIsRequest, true, host); if (result != null && !result.isEmpty() && result.size() > 0) { String originalColor = messageInfo.getHighlight(); String originalComment = messageInfo.getComment(); List colorList = new ArrayList<>(); if (originalColor != null) { colorList.add(originalColor); } colorList.add(result.get(0).get("color")); String color = uc.getEndColor(gck.getColorKeys(colorList)); messageInfo.setHighlight(color); String addComment = String.join(", ", result.get(1).get("comment")); String resComment = !Objects.equals(originalComment, "") ? String.format("%s, %s", originalComment, addComment) : addComment; messageInfo.setComment(resComment); } } } class MarkInfoTab implements IMessageEditorTab { private final JTabbedPane jTabbedPane = new JTabbedPane(); private JTable jTable = new JTable(); private final IMessageEditorController controller; private Map extractRequestMap; private Map extractResponseMap; private ArrayList titleList = new ArrayList<>(); public MarkInfoTab(IMessageEditorController controller, boolean editable) { this.controller = controller; } @Override public String getTabCaption() { return "MarkInfo"; } @Override public Component getUiComponent() { jTabbedPane.addChangeListener(new ChangeListener() { @Override public void stateChanged(ChangeEvent arg0) { jTable = (JTable) ((JScrollPane)jTabbedPane.getSelectedComponent()).getViewport().getView(); } }); return this.jTabbedPane; } @Override public boolean isEnabled(byte[] content, boolean isRequest) { String c = new String(content, StandardCharsets.UTF_8).intern(); List> result = pm.processMessageByContent(helpers, content, isRequest, false, ""); if (result != null && !result.isEmpty()) { Map dataMap = result.get(0); if (isRequest) { extractRequestMap = dataMap; } else { extractResponseMap = dataMap; } return true; } return false; } @Override public byte[] getMessage() { return null; } @Override public boolean isModified() { return false; } /** * 快捷键复制功能 */ @Override public byte[] getSelectedData() { int[] selectRows = jTable.getSelectedRows(); StringBuilder selectData = new StringBuilder(); for (int row : selectRows) { selectData.append(jTable.getValueAt(row, 0).toString()).append("\n"); } // 便于单行复制,去除最后一个换行符 String revData = selectData.reverse().toString().replaceFirst("\n", ""); StringBuilder retData = new StringBuilder(revData).reverse(); return helpers.stringToBytes(retData.toString()); } /** * 使用setMessage用来做Extractor */ @Override public void setMessage(byte[] content, boolean isRequest) { String c = new String(content, StandardCharsets.UTF_8).intern(); if (content.length > 0) { if (isRequest) { makeTable(extractRequestMap); } else { makeTable(extractResponseMap); } } } /** * 创建MarkInfo表单 */ public void makeTable(Map dataMap) { ArrayList lTitleList = new ArrayList<>(); dataMap.keySet().forEach(i->{ String[] extractData = dataMap.get(i).split("\n"); Object[][] data = new Object[extractData.length][1]; for (int x = 0; x < extractData.length; x++) { data[x][0] = extractData[x]; // stdout.println(extractData[x]); } JTable infoTable = new JTable(data, new Object[]{"Information"}); infoTable.setAutoCreateRowSorter(true); JScrollPane jScrollPane = new JScrollPane(infoTable); lTitleList.add(i); this.jTabbedPane.addTab(i, jScrollPane); }); /* * 使用removeAll会导致MarkInfo UI出现空白的情况,为了改善用户侧体验,采用remove的方式进行删除; * 采用全局ArrayList的方式遍历删除Tab,以此应对BurpSuite缓存机制导致的MarkInfo UI错误展示。 */ titleList.forEach(t->{ int indexOfTab = this.jTabbedPane.indexOfTab(t); if (indexOfTab != -1) { this.jTabbedPane.removeTabAt(indexOfTab); } }); titleList = lTitleList; } } @Override public IMessageEditorTab createNewInstance(IMessageEditorController controller, boolean editable) { return new MarkInfoTab(controller, editable); } }