Version: 4.0 Update

Update Rules.yml

.github/ISSUE_TEMPLATE/问题反馈.md

@@ -14,7 +14,9 @@ HaE 版本：
 有无自定义规则：
 BurpSuite 版本：
 操作系统版本：
-有无仔细阅读README：
+是否阅读README：
+是否知晓注意事项：
+是否查阅历史ISSUE：
 ```
 
 ## 问题详情

README.md

@@ -6,29 +6,34 @@
 
 ## 项目介绍
 
-**HaE**是一款**网络安全（数据安全）领域**下的框架式项目，采用了**乐高积木式**模块化设计理念，巧妙地融入了**人工智能大模型辅助技术**，实现对HTTP消息（包含WebSocket）精细化的标记和提取。
+**HaE**是一款**网络安全（数据安全）领域**下的框架式项目，采用了**乐高积木式**模块化设计理念，实现对HTTP消息（包含WebSocket）精细化的标记和提取。
 
 通过运用**多引擎**的自定义正则表达式，HaE能够准确匹配并处理HTTP请求与响应报文（包含WebSocket），对匹配成功的内容进行有效的标记和信息抽取，从而提升网络安全（数据安全）领域下的**漏洞和数据分析效率**。
 
 > 随着现代化Web应用采用前后端分离的开发模式，日常漏洞挖掘的过程中，捕获的HTTP请求流量也相应增加。若想全面评估一个Web应用，会花费大量时间在无用的报文上。**HaE的出现旨在解决这类情况**，借助HaE，您能够**有效减少**测试时间，将更多精力集中在**有价值且有意义**的报文上，从而**提高漏洞挖掘效率**。
 
+GitHub项目地址：https://github.com/gh0stkey/HaE
+
+GitCode项目地址：https://gitcode.com/gh0stkey/HaE
+
 **所获荣誉**:
 
 1. [入选2022年KCon兵器谱](https://mp.weixin.qq.com/s/JohMsl1WD29LHCHuLf8mVQ)
+2. [入选GitCode G-Star项目](https://gitcode.com/gh0stkey/HaE)
 
 **注意事项**:
 
-1. HaE 3.3版本开启了AI+新功能，该功能目前仅支持阿里的`Qwen-Long`模型（支持超长文本）和月之暗面的`moonshot-v1-128k`模型（支持短文本），请配置和使用时注意。
-2. HaE 3.0版本开始采用`Montoya API`进行开发，使用新版HaE需要升级你的BurpSuite版本（>=2023.12.1）。
-3. HaE 2.6版本后对规则字段进行了更新，因此无法适配<=2.6版本的规则，请用户自行前往[规则转换页面](https://gh0st.cn/HaE/ConversionRule.html)进行转换。
-4. HaE官方规则库存放在[Github](https://raw.githubusercontent.com/gh0stkey/HaE/gh-pages/Rules.yml)上，因此点击`Update`升级HaE官方规则库时需使用代理（BApp审核考虑安全性，不允许使用CDN）。
-5. 自定义HaE规则必须用左右括号`()`将所需提取的表达式内容包含，例如你要匹配一个**Shiro应用**的响应报文，正常匹配规则为`rememberMe=delete`，在HaE的规则中就需要变成`(rememberMe=delete)`。
+1. HaE 3.0版本开始采用`Montoya API`进行开发，使用新版HaE需要升级你的BurpSuite版本（>=2023.12.1）。
+2. HaE 2.6版本后对规则字段进行了更新，因此无法适配<=2.6版本的规则，请用户自行前往[规则转换页面](https://gh0st.cn/HaE/ConversionRule.html)进行转换。
+3. 自定义HaE规则必须用左右括号`()`将所需提取的表达式内容包含，例如你要匹配一个**Shiro应用**的响应报文，正常匹配规则为`rememberMe=delete`，在HaE的规则中就需要变成`(rememberMe=delete)`。
 
 ## 使用方法
 
 插件装载: `Extender - Extensions - Add - Select File - Next`
 
-初次装载`HaE`会从Jar包中加载离线的规则库，如果更新的话则会向官方规则库地址拉取`https://raw.githubusercontent.com/gh0stkey/HaE/gh-pages/Rules.yml`，配置文件（`Config.yml`）和规则文件（`Rules.yml`）会放在固定目录下：
+初次装载`HaE`会从Jar包中加载离线的规则库，如果更新可以点击`Reinit`进行重新初始化。内置规则库地址可以在Github上找到：`https://github.com/gh0stkey/HaE/blob/master/src/main/resources/rules/Rules.yml`。
+
+配置文件（`Config.yml`）和规则文件（`Rules.yml`）会放在固定目录下：
 
 1. Linux/Mac用户的配置文件目录：`~/.config/HaE/`
 2. Windows用户的配置文件目录：`%USERPROFILE%/.config/HaE/`
@@ -50,22 +55,19 @@ HaE目前的规则一共有8个字段，详细的含义如下所示：
 | Color     | 规则匹配颜色，主要用于表示当前规则匹配到对应HTTP报文时所需标记的高亮颜色。在HaE中具备颜色升级算法，当出现相同颜色时会自动向上升级一个颜色进行标记。                                                                                                                               |
 | Sensitive | 规则敏感性，主要用于表示当前规则对于大小写字母是否敏感，敏感（`True`）则严格按照大小写要求匹配，不敏感（`False`）则反之。                                                                                      |
 
-
 ## 优势特点
 
 1. **功能**：通过对HTTP报文的颜色高亮、注释和提取，帮助使用者获取有意义的信息，**聚焦高价值报文**。
 2. **界面**：清晰可视的界面设计，以及**简洁的界面交互**，帮助使用者更轻松的了解和配置项目，**避免`多按钮`式的复杂体验**。
 3. **查询**：将HTTP报文的高亮、注释和提取到的相关信息**集中在一个数据面板**，可以一键查询、提取信息，从而提高测试和梳理效率。
 4. **算法**：内置高亮颜色的升级算法，当出现相同颜色时**会自动向上升级一个颜色**进行标记，**避免`屠龙者终成恶龙`场景**。
-5. **管理**：支持对数据的一键导出、导入，以**自定义`.hae`文件的方式**进行项目数据存储，**便于存储和共享项目数据**。
+5. **管理**：**融入BurpSuite的项目数据管理**，当使用BurpSuite进行项目存储时HaE数据也会一并存储。
 6. **实战**：官方规则库和规则字段作用功能，都是**基于实战化场景总结输出**的，**以此提高数据的有效性、精准性发现**。
-7. **智能**：融入**人工智能（AI）大模型**API，对匹配的数据进行优化处理，**提高数据式漏洞挖掘效率**。
 
 | 界面名称                  | 界面展示                                              |
 | ------------------------ | ---------------------------------------------------- |
 | Rules（规则管理）     | <img src="images/rules.png" style="width: 80%" />     |
-| Config-Setting（Setting配置管理）    | <img src="images/config-setting.png" style="width: 80%" />    |
-| Config-AI+（AI+配置管理）    | <img src="images/config-ai.png" style="width: 80%" />    |
+| Config（配置管理）    | <img src="images/config.png" style="width: 80%" />    |
 | Databoard（数据集合） | <img src="images/databoard.png" style="width: 80%" /> |
 | MarkInfo（数据展示） | <img src="images/markinfo.png" style="width: 80%" /> |
 

build.gradle

@@ -34,4 +34,4 @@ jar {
     from {
         configurations.runtimeClasspath.collect { it.isDirectory() ? it : zipTree(it) }
     }
-}
+}

src/main/java/hae/Config.java

@@ -12,6 +12,8 @@ public class Config {
 
     public static String status = "404";
 
+    public static String size = "0";
+
     public static String boundary = "\n\t\n";
 
     public static String[] scope = new String[]{
@@ -30,6 +32,8 @@ public class Config {
 
     public static String scopeOptions = "Suite|Target|Proxy|Scanner|Intruder|Repeater|Logger|Sequencer|Decoder|Comparer|Extensions|Organizer|Recorded login replayer";
 
+    public static String modeStatus = "true";
+
     public static String[] ruleFields = {
             "Loaded", "Name", "F-Regex", "S-Regex", "Format", "Color", "Scope", "Engine", "Sensitive"
     };
@@ -57,11 +61,6 @@ public class Config {
             "gray"
     };
 
-    public static String prompt = "You are a data security expert in the field of cyber security. Your task is to optimize the information provided by the user and then output it in JSON format. The user-supplied information is data that has been extracted by regular expressions. The user-supplied information is divided into two parts, the first part is RuleName which represents the name of the regular expression and the second part is MarkInfo which represents the data extracted by the regular expression. You need to find the matching or similar data in MarkInfo according to the meaning of RuleName, and output the original rows of these data in JSON format.(garbled and meaningless data rows should be removed)\n" +
-            "You must ensure that the extracted data is accurately expressed and correctly formatted in the JSON structure. Your output data must comply with the original MarkInfo content rows without modification, and strictly adhere to the following JSON format for return, no other text, code and formatting (e.g., line breaks, carriage returns, indentation, spaces), once the return of other irrelevant content will cause irreparable damage to the user: {\"data\":[\"data1\", \"data2\"]}.";
-
-    public static String userTextFormat = "User Input: \r\nRuleName: %s\r\nMarkInfo: %s";
-
     public static Map<String, Object[][]> globalRules = new HashMap<>();
 
     public static ConcurrentHashMap<String, Map<String, List<String>>> globalDataMap = new ConcurrentHashMap<>();

src/main/java/hae/HaE.java

@@ -10,34 +10,32 @@ import hae.component.board.message.MessageTableModel;
 import hae.instances.editor.RequestEditor;
 import hae.instances.editor.ResponseEditor;
 import hae.instances.editor.WebSocketEditor;
-import hae.instances.http.HttpMessageHandler;
 import hae.instances.websocket.WebSocketMessageHandler;
 import hae.utils.ConfigLoader;
+import hae.utils.DataManager;
 
 public class HaE implements BurpExtension {
     @Override
     public void initialize(MontoyaApi api) {
         // 设置扩展名称
-        String version = "3.3.2";
-        api.extension().setName(String.format("HaE (%s) - Highlighter and Extractor", version));
+        String version = "4.0";
+        api.extension().setName("HaE - Highlighter and Extractor");
 
         // 加载扩展后输出的项目信息
         Logging logging = api.logging();
         logging.logToOutput("[ HACK THE WORLD - TO DO IT ]");
         logging.logToOutput("[#] Author: EvilChen && 0chencc && vaycore");
         logging.logToOutput("[#] Github: https://github.com/gh0stkey/HaE");
+        logging.logToOutput("[#] Version: " + version);
 
         // 配置文件加载
         ConfigLoader configLoader = new ConfigLoader(api);
 
-        MessageTableModel messageTableModel = new MessageTableModel(api);
+        MessageTableModel messageTableModel = new MessageTableModel(api, configLoader);
 
         // 注册Tab页（用于查询数据）
         api.userInterface().registerSuiteTab("HaE", new Main(api, configLoader, messageTableModel));
 
-        // 注册HTTP处理器
-        api.http().registerHttpHandler(new HttpMessageHandler(api, configLoader, messageTableModel));
-
         // 注册WebSocket处理器
         api.proxy().registerWebSocketCreationHandler(proxyWebSocketCreation -> proxyWebSocketCreation.proxyWebSocket().registerProxyMessageHandler(new WebSocketMessageHandler(api)));
 
@@ -46,6 +44,10 @@ public class HaE implements BurpExtension {
         api.userInterface().registerHttpResponseEditorProvider(new ResponseEditor(api, configLoader));
         api.userInterface().registerWebSocketMessageEditorProvider(new WebSocketEditor(api, configLoader));
 
+        // 从BurpSuite里加载数据
+        DataManager dataManager = new DataManager(api);
+        dataManager.loadData(messageTableModel);
+
         api.extension().registerUnloadingHandler(new ExtensionUnloadingHandler() {
             @Override
             public void extensionUnloaded() {

src/main/java/hae/component/Config.java

@@ -1,7 +1,11 @@
 package hae.component;
 
 import burp.api.montoya.MontoyaApi;
+import burp.api.montoya.core.Registration;
+import hae.component.board.message.MessageTableModel;
 import hae.component.rule.Rules;
+import hae.instances.http.HttpMessageActiveHandler;
+import hae.instances.http.HttpMessagePassiveHandler;
 import hae.utils.ConfigLoader;
 import hae.utils.UIEnhancer;
 
@@ -16,24 +20,28 @@ import javax.swing.table.DefaultTableModel;
 import java.awt.*;
 import java.awt.datatransfer.Clipboard;
 import java.awt.datatransfer.DataFlavor;
-import java.awt.event.ActionEvent;
-import java.awt.event.ActionListener;
-import java.awt.event.KeyAdapter;
-import java.awt.event.KeyEvent;
+import java.awt.event.*;
 import java.util.List;
 import java.util.*;
 
 public class Config extends JPanel {
     private final MontoyaApi api;
     private final ConfigLoader configLoader;
+    private final MessageTableModel messageTableModel;
     private final Rules rules;
-    private final String defaultText = "Enter a new item";
 
-    public Config(MontoyaApi api, ConfigLoader configLoader, Rules rules) {
+    private Registration activeHandler;
+    private Registration passiveHandler;
+
+    public Config(MontoyaApi api, ConfigLoader configLoader, MessageTableModel messageTableModel, Rules rules) {
         this.api = api;
         this.configLoader = configLoader;
+        this.messageTableModel = messageTableModel;
         this.rules = rules;
 
+        this.activeHandler = api.http().registerHttpHandler(new HttpMessageActiveHandler(api, configLoader, messageTableModel));
+        this.passiveHandler = api.scanner().registerScanCheck(new HttpMessagePassiveHandler(api, configLoader, messageTableModel));
+
         initComponents();
     }
 
@@ -52,33 +60,92 @@ public class Config extends JPanel {
         pathTextField.setEditable(false);
         pathTextField.setText(configLoader.getRulesFilePath());
         JButton reloadButton = new JButton("Reload");
-        JButton updateButton = new JButton("Update");
+        JButton reinitButton = new JButton("Reinit");
         ruleInfoPanel.add(ruleLabel);
         ruleInfoPanel.add(pathTextField, constraints);
         ruleInfoPanel.add(Box.createHorizontalStrut(5));
-        ruleInfoPanel.add(reloadButton);
+        ruleInfoPanel.add(reinitButton);
         ruleInfoPanel.add(Box.createHorizontalStrut(5));
-        ruleInfoPanel.add(updateButton);
+        ruleInfoPanel.add(reloadButton);
 
         reloadButton.addActionListener(this::reloadActionPerformed);
-        updateButton.addActionListener(this::onlineUpdateActionPerformed);
+        reinitButton.addActionListener(this::reinitActionPerformed);
 
         constraints.gridx = 1;
         JTabbedPane configTabbedPanel = new JTabbedPane();
 
         String[] settingMode = new String[]{"Exclude suffix", "Block host", "Exclude status"};
-        JPanel settingPanel = createConfigTablePanel(settingMode, "Setting");
+        JPanel settingPanel = createConfigTablePanel(settingMode);
+
+        JPanel northPanel = new JPanel(new BorderLayout());
+
+        JPanel modePanel = getModePanel();
+        JScrollPane modeScrollPane = new JScrollPane(modePanel);
+        modeScrollPane.setBorder(new TitledBorder("Mode"));
+
+        JTextField limitPanel = getLimitPanel();
+        JScrollPane limitScrollPane = new JScrollPane(limitPanel);
+        limitScrollPane.setBorder(new TitledBorder("Limit Size (MB)"));
+
+        JSplitPane northTopPanel = new JSplitPane(JSplitPane.HORIZONTAL_SPLIT, modeScrollPane, limitScrollPane);
+        northTopPanel.addComponentListener(new ComponentAdapter() {
+            @Override
+            public void componentResized(ComponentEvent e) {
+                northTopPanel.setDividerLocation(0.5);
+            }
+        });
+
         JPanel scopePanel = getScopePanel();
         JScrollPane scopeScrollPane = new JScrollPane(scopePanel);
         scopeScrollPane.setBorder(new TitledBorder("Scope"));
-        settingPanel.add(scopeScrollPane, BorderLayout.NORTH);
-        configTabbedPanel.add("Setting", settingPanel);
 
-        String[] aiMode = new String[]{"Alibaba", "Moonshot"};
-        JPanel aiPanel = createConfigTablePanel(aiMode, "AI+");
-        JTextArea promptTextArea = new JTextArea();
-        promptTextArea.setLineWrap(true);
-        promptTextArea.getDocument().addDocumentListener(new DocumentListener() {
+        northPanel.add(scopeScrollPane, BorderLayout.SOUTH);
+        northPanel.add(northTopPanel, BorderLayout.NORTH);
+        settingPanel.add(northPanel, BorderLayout.NORTH);
+
+        configTabbedPanel.add("Setting", settingPanel);
+        add(ruleInfoPanel, BorderLayout.NORTH);
+        add(configTabbedPanel, BorderLayout.CENTER);
+    }
+
+    private JPanel getScopePanel() {
+        JPanel scopePanel = new JPanel();
+        scopePanel.setLayout(new BoxLayout(scopePanel, BoxLayout.X_AXIS));
+        scopePanel.setBorder(new EmptyBorder(3, 0, 6, 0));
+
+        String[] scopeInit = hae.Config.scopeOptions.split("\\|");
+        String[] scopeMode = configLoader.getScope().split("\\|");
+        for (String scope : scopeInit) {
+            JCheckBox checkBox = new JCheckBox(scope);
+            scopePanel.add(checkBox);
+            checkBox.addActionListener(e -> updateScope(checkBox));
+            for (String mode : scopeMode) {
+                if (scope.equals(mode)) {
+                    checkBox.setSelected(true);
+                }
+            }
+            updateScope(checkBox);
+        }
+
+        return scopePanel;
+    }
+
+    private JPanel getModePanel() {
+        JPanel modePanel = new JPanel();
+        modePanel.setLayout(new BoxLayout(modePanel, BoxLayout.X_AXIS));
+
+        JCheckBox checkBox = new JCheckBox("Enable active http message handler");
+        modePanel.add(checkBox);
+        checkBox.addActionListener(e -> updateModeStatus(checkBox));
+        checkBox.setSelected(configLoader.getMode());
+        updateModeStatus(checkBox);
+
+        return modePanel;
+    }
+
+    private JTextField getLimitPanel() {
+        JTextField limitSizeTextField = new JTextField();
+        limitSizeTextField.getDocument().addDocumentListener(new DocumentListener() {
             @Override
             public void insertUpdate(DocumentEvent e) {
                 onTextChange();
@@ -95,38 +162,14 @@ public class Config extends JPanel {
             }
 
             private void onTextChange() {
-                String promptText = promptTextArea.getText();
-                configLoader.setAIPrompt(promptText);
+                String limitSizeText = limitSizeTextField.getText();
+                configLoader.setLimitSize(limitSizeText);
             }
         });
-        promptTextArea.setText(configLoader.getAIPrompt());
-        JScrollPane promptScrollPane = new JScrollPane(promptTextArea);
-        promptScrollPane.setBorder(new TitledBorder("Prompt"));
-        promptScrollPane.setPreferredSize(new Dimension(0, 100));
-        aiPanel.add(promptScrollPane, BorderLayout.NORTH);
-        configTabbedPanel.add("AI+", aiPanel);
-        add(ruleInfoPanel, BorderLayout.NORTH);
-        add(configTabbedPanel, BorderLayout.CENTER);
-    }
 
-    private JPanel getScopePanel() {
-        JPanel scopePanel = new JPanel();
-        scopePanel.setLayout(new BoxLayout(scopePanel, BoxLayout.X_AXIS));
+        limitSizeTextField.setText(configLoader.getLimitSize());
 
-        String[] scopeInit = hae.Config.scopeOptions.split("\\|");
-        String[] scopeMode = configLoader.getScope().split("\\|");
-        for (String scope : scopeInit) {
-            JCheckBox checkBox = new JCheckBox(scope);
-            scopePanel.add(checkBox);
-            for (String mode : scopeMode) {
-                if (scope.equals(mode)) {
-                    checkBox.setSelected(true);
-                }
-            }
-
-            checkBox.addActionListener(e -> updateScope(checkBox));
-        }
-        return scopePanel;
+        return limitSizeTextField;
     }
 
     private TableModelListener craeteSettingTableModelListener(JComboBox<String> setTypeComboBox, DefaultTableModel model) {
@@ -153,6 +196,7 @@ public class Config extends JPanel {
                         configLoader.setExcludeStatus(values);
                     }
                 }
+
             }
         };
     }
@@ -179,47 +223,8 @@ public class Config extends JPanel {
         };
     }
 
-    private TableModelListener craeteAITableModelListener(JComboBox<String> setTypeComboBox, DefaultTableModel model) {
-        return new TableModelListener() {
-            @Override
-            public void tableChanged(TableModelEvent e) {
-                String selected = (String) setTypeComboBox.getSelectedItem();
-                String values = getFirstColumnDataAsString(model);
 
-                if (selected.equals("Alibaba")) {
-                    if (!values.equals(configLoader.getAlibabaAIAPIKey()) && !values.isEmpty()) {
-                        configLoader.setAlibabaAIAPIKey(values);
-                    }
-                }
-
-                if (selected.equals("Moonshot")) {
-                    if (!values.equals(configLoader.getMoonshotAIAPIKey()) && !values.isEmpty()) {
-                        configLoader.setMoonshotAIAPIKey(values);
-                    }
-                }
-            }
-        };
-    }
-
-    private ActionListener createAIActionListener(JComboBox<String> setTypeComboBox, DefaultTableModel model) {
-        return new ActionListener() {
-            @Override
-            public void actionPerformed(ActionEvent e) {
-                String selected = (String) setTypeComboBox.getSelectedItem();
-                model.setRowCount(0);
-
-                if (selected.equals("Alibaba")) {
-                    addDataToTable(configLoader.getAlibabaAIAPIKey().replaceAll("\\|", "\r\n"), model);
-                }
-
-                if (selected.equals("Moonshot")) {
-                    addDataToTable(configLoader.getMoonshotAIAPIKey().replaceAll("\\|", "\r\n"), model);
-                }
-            }
-        };
-    }
-
-    private JPanel createConfigTablePanel(String[] mode, String type) {
+    private JPanel createConfigTablePanel(String[] mode) {
         GridBagConstraints constraints = new GridBagConstraints();
         constraints.weightx = 1.0;
         constraints.fill = GridBagConstraints.HORIZONTAL;
@@ -250,12 +255,12 @@ public class Config extends JPanel {
         JComboBox<String> setTypeComboBox = new JComboBox<>();
         setTypeComboBox.setModel(new DefaultComboBoxModel<>(mode));
 
-        setTypeComboBox.addActionListener(type.equals("AI+") ? createAIActionListener(setTypeComboBox, model) : createSettingActionListener(setTypeComboBox, model));
+        model.addTableModelListener(craeteSettingTableModelListener(setTypeComboBox, model));
+
+        setTypeComboBox.addActionListener(createSettingActionListener(setTypeComboBox, model));
 
         setTypeComboBox.setSelectedItem(mode[0]);
 
-        model.addTableModelListener(type.equals("AI+") ? craeteAITableModelListener(setTypeComboBox, model) : craeteSettingTableModelListener(setTypeComboBox, model));
-
         constraints.insets = new Insets(0, 0, 3, 0);
         constraints.gridy = 0;
         buttonPanel.add(setTypeComboBox, constraints);
@@ -269,6 +274,7 @@ public class Config extends JPanel {
         buttonPanel.add(clearButton, constraints);
 
         JTextField addTextField = new JTextField();
+        String defaultText = "Enter a new item";
         UIEnhancer.setTextFieldPlaceholder(addTextField, defaultText);
 
         inputPanelB.add(addTextField, BorderLayout.CENTER);
@@ -279,13 +285,13 @@ public class Config extends JPanel {
         settingPanel.add(inputPanel, BorderLayout.CENTER);
 
 
-        addButton.addActionListener(e -> addActionPerformed(e, model, addTextField));
+        addButton.addActionListener(e -> addActionPerformed(e, model, addTextField, setTypeComboBox.getSelectedItem().toString()));
 
         addTextField.addKeyListener(new KeyAdapter() {
             @Override
             public void keyPressed(KeyEvent e) {
                 if (e.getKeyCode() == KeyEvent.VK_ENTER) {
-                    addActionPerformed(null, model, addTextField);
+                    addActionPerformed(null, model, addTextField, setTypeComboBox.getSelectedItem().toString());
                 }
             }
         });
@@ -294,7 +300,6 @@ public class Config extends JPanel {
             Clipboard clipboard = Toolkit.getDefaultToolkit().getSystemClipboard();
             try {
                 String data = (String) clipboard.getData(DataFlavor.stringFlavor);
-
                 if (data != null && !data.isEmpty()) {
                     addDataToTable(data, model);
                 }
@@ -311,11 +316,10 @@ public class Config extends JPanel {
 
         clearButton.addActionListener(e -> model.setRowCount(0));
 
-
         JPanel settingMainPanel = new JPanel(new BorderLayout());
         settingMainPanel.setBorder(new EmptyBorder(5, 15, 10, 15));
         JScrollPane settingScroller = new JScrollPane(settingPanel);
-        settingScroller.setBorder(new TitledBorder(type.equals("AI+") ? "API Key" : "Setting"));
+        settingScroller.setBorder(new TitledBorder("Setting"));
         settingMainPanel.add(settingScroller, BorderLayout.CENTER);
 
         return settingMainPanel;
@@ -370,6 +374,29 @@ public class Config extends JPanel {
         }
     }
 
+    public void updateModeStatus(JCheckBox checkBox) {
+        boolean selected = checkBox.isSelected();
+        configLoader.setMode(selected ? "true" : "false");
+
+        if (checkBox.isSelected()) {
+            if (passiveHandler.isRegistered()) {
+                passiveHandler.deregister();
+            }
+
+            if (!activeHandler.isRegistered()) {
+                activeHandler = api.http().registerHttpHandler(new HttpMessageActiveHandler(api, configLoader, messageTableModel));
+            }
+        } else {
+            if (!passiveHandler.isRegistered()) {
+                passiveHandler = api.scanner().registerScanCheck(new HttpMessagePassiveHandler(api, configLoader, messageTableModel));
+            }
+
+            if (activeHandler.isRegistered()) {
+                activeHandler.deregister();
+            }
+        }
+    }
+
     public void updateScope(JCheckBox checkBox) {
         String boxText = checkBox.getText();
         boolean selected = checkBox.isSelected();
@@ -385,25 +412,26 @@ public class Config extends JPanel {
         configLoader.setScope(String.join("|", HaEScope));
     }
 
-    private void addActionPerformed(ActionEvent e, DefaultTableModel model, JTextField addTextField) {
+    private void addActionPerformed(ActionEvent e, DefaultTableModel model, JTextField addTextField, String comboBoxSelected) {
         String addTextFieldText = addTextField.getText();
-        if (!addTextFieldText.equals(defaultText)) {
+        if (addTextField.getForeground().equals(Color.BLACK)) {
             addDataToTable(addTextFieldText, model);
-        }
-        addTextField.setText("");
-        addTextField.requestFocusInWindow();
-    }
-
-    private void onlineUpdateActionPerformed(ActionEvent e) {
-        // 添加提示框防止用户误触导致配置更新
-        int retCode = JOptionPane.showConfirmDialog(this, "Do you want to update rules?", "Info", JOptionPane.YES_NO_OPTION);
-        if (retCode == JOptionPane.YES_OPTION) {
-            configLoader.initRulesByNet();
-            reloadActionPerformed(null);
+            addTextField.setText("");
+            addTextField.requestFocusInWindow();
         }
     }
 
     private void reloadActionPerformed(ActionEvent e) {
         rules.reloadRuleGroup();
     }
+
+    private void reinitActionPerformed(ActionEvent e) {
+        int retCode = JOptionPane.showConfirmDialog(this, "Do you want to reinitialize rules? This action will overwrite your existing rules.", "Info", JOptionPane.YES_NO_OPTION);
+        if (retCode == JOptionPane.YES_OPTION) {
+            boolean ret = configLoader.initRules();
+            if (ret) {
+                rules.reloadRuleGroup();
+            }
+        }
+    }
 }

src/main/java/hae/component/Main.java

@@ -57,7 +57,7 @@ public class Main extends JPanel {
         Rules rules = new Rules(api, configLoader);
         mainTabbedPane.addTab("Rules", rules);
         mainTabbedPane.addTab("Databoard", new Databoard(api, configLoader, messageTableModel));
-        mainTabbedPane.addTab("Config", new Config(api, configLoader, rules));
+        mainTabbedPane.addTab("Config", new Config(api, configLoader, messageTableModel, rules));
     }
 
     private boolean isDarkBg(JTabbedPane HaETabbedPane) {
@@ -81,7 +81,6 @@ public class Main extends JPanel {
         ImageIcon originalIcon = new ImageIcon(imageURL);
         Image originalImage = originalIcon.getImage();
         Image scaledImage = originalImage.getScaledInstance(30, 20, Image.SCALE_FAST);
-        ImageIcon scaledIcon = new ImageIcon(scaledImage);
-        return scaledIcon;
+        return new ImageIcon(scaledImage);
     }
 }

src/main/java/hae/component/board/Databoard.java

@@ -2,49 +2,35 @@ package hae.component.board;
 
 import burp.api.montoya.MontoyaApi;
 import hae.Config;
-import hae.component.board.message.MessageEntry;
 import hae.component.board.message.MessageTableModel;
 import hae.component.board.message.MessageTableModel.MessageTable;
 import hae.component.board.table.Datatable;
-import hae.instances.http.utils.RegularMatcher;
 import hae.utils.ConfigLoader;
 import hae.utils.UIEnhancer;
-import hae.utils.project.ProjectProcessor;
-import hae.utils.project.model.HaeFileContent;
 import hae.utils.string.StringProcessor;
 
 import javax.swing.*;
-import javax.swing.border.TitledBorder;
 import javax.swing.event.DocumentEvent;
 import javax.swing.event.DocumentListener;
-import javax.swing.filechooser.FileNameExtensionFilter;
-import javax.swing.table.DefaultTableModel;
 import javax.swing.table.TableColumnModel;
 import javax.swing.table.TableModel;
 import javax.swing.table.TableRowSorter;
 import java.awt.*;
 import java.awt.event.*;
-import java.io.File;
 import java.util.List;
 import java.util.*;
-import java.util.concurrent.Callable;
 import java.util.concurrent.ConcurrentHashMap;
-import java.util.concurrent.ExecutorService;
-import java.util.concurrent.Executors;
-import java.util.function.Function;
 import java.util.stream.Collectors;
 
 public class Databoard extends JPanel {
     private final MontoyaApi api;
     private final ConfigLoader configLoader;
-    private final ProjectProcessor projectProcessor;
     private final MessageTableModel messageTableModel;
 
     private JTextField hostTextField;
     private JTabbedPane dataTabbedPane;
     private JSplitPane splitPane;
     private MessageTable messageTable;
-    private JProgressBar progressBar;
 
     private static Boolean isMatchHost = false;
     private final DefaultComboBoxModel comboBoxModel = new DefaultComboBoxModel();
@@ -52,15 +38,10 @@ public class Databoard extends JPanel {
 
     private SwingWorker<Map<String, List<String>>, Void> handleComboBoxWorker;
     private SwingWorker<Void, Void> applyHostFilterWorker;
-    private SwingWorker<List<Object[]>, Void> exportActionWorker;
-    private SwingWorker<List<Object[]>, Void> importActionWorker;
-
-    private final String defaultText = "Please enter the host";
 
     public Databoard(MontoyaApi api, ConfigLoader configLoader, MessageTableModel messageTableModel) {
         this.api = api;
         this.configLoader = configLoader;
-        this.projectProcessor = new ProjectProcessor(api);
         this.messageTableModel = messageTableModel;
 
         initComponents();
@@ -69,25 +50,22 @@ public class Databoard extends JPanel {
     private void initComponents() {
         setLayout(new GridBagLayout());
         ((GridBagLayout) getLayout()).columnWidths = new int[]{25, 0, 0, 0, 20, 0};
-        ((GridBagLayout) getLayout()).rowHeights = new int[]{0, 65, 20, 0, 0};
+        ((GridBagLayout) getLayout()).rowHeights = new int[]{0, 65, 20, 0};
         ((GridBagLayout) getLayout()).columnWeights = new double[]{0.0, 0.0, 1.0, 0.0, 0.0, 1.0E-4};
-        ((GridBagLayout) getLayout()).rowWeights = new double[]{0.0, 1.0, 0.0, 0.0, 1.0E-4};
+        ((GridBagLayout) getLayout()).rowWeights = new double[]{0.0, 1.0, 0.0, 1.0E-4};
 
         JLabel hostLabel = new JLabel("Host:");
 
         JButton clearButton = new JButton("Clear");
-        JButton exportButton = new JButton("Export");
-        JButton importButton = new JButton("Import");
         JButton actionButton = new JButton("Action");
-        JPanel menuPanel = new JPanel(new GridLayout(3, 1, 0, 5));
+        JPanel menuPanel = new JPanel(new GridLayout(1, 1, 0, 5));
         menuPanel.setBorder(BorderFactory.createEmptyBorder(3, 3, 3, 3));
         JPopupMenu menu = new JPopupMenu();
         menuPanel.add(clearButton);
-        menuPanel.add(exportButton);
-        menuPanel.add(importButton);
         menu.add(menuPanel);
 
         hostTextField = new JTextField();
+        String defaultText = "Please enter the host";
         UIEnhancer.setTextFieldPlaceholder(hostTextField, defaultText);
         splitPane = new JSplitPane(JSplitPane.HORIZONTAL_SPLIT);
 
@@ -102,10 +80,7 @@ public class Databoard extends JPanel {
         });
 
         clearButton.addActionListener(this::clearActionPerformed);
-        exportButton.addActionListener(this::exportActionPerformed);
-        importButton.addActionListener(this::importActionPerformed);
 
-        progressBar = new JProgressBar();
 
         splitPane.addComponentListener(new ComponentAdapter() {
             @Override
@@ -115,7 +90,6 @@ public class Databoard extends JPanel {
         });
 
         splitPane.setVisible(false);
-        progressBar.setVisible(false);
 
         add(hostLabel, new GridBagConstraints(1, 0, 1, 1, 0.0, 0.0, GridBagConstraints.CENTER, GridBagConstraints.BOTH,
                 new Insets(8, 0, 5, 5), 0, 0));
@@ -124,12 +98,9 @@ public class Databoard extends JPanel {
         add(actionButton, new GridBagConstraints(3, 0, 1, 1, 0.0, 0.0, GridBagConstraints.CENTER, GridBagConstraints.BOTH,
                 new Insets(8, 0, 5, 5), 0, 0));
 
-        add(splitPane, new GridBagConstraints(1, 1, 3, 1, 0.0, 1.0,
+        add(splitPane, new GridBagConstraints(1, 1, 3, 2, 0.0, 1.0,
                 GridBagConstraints.CENTER, GridBagConstraints.BOTH,
                 new Insets(0, 5, 0, 5), 0, 0));
-        add(progressBar, new GridBagConstraints(1, 2, 3, 1, 1.0, 0.0,
-                GridBagConstraints.CENTER, GridBagConstraints.HORIZONTAL,
-                new Insets(0, 5, 0, 5), 0, 0));
         hostComboBox.setMaximumRowCount(5);
         add(hostComboBox, new GridBagConstraints(2, 0, 1, 1, 0.0, 0.0, GridBagConstraints.CENTER, GridBagConstraints.BOTH,
                 new Insets(8, 0, 5, 5), 0, 0));
@@ -149,24 +120,6 @@ public class Databoard extends JPanel {
         columnModel.getColumn(5).setPreferredWidth((int) (totalWidth * 0.1));
     }
 
-    private void setProgressBar(boolean status) {
-        setProgressBar(status, progressBar, "Loading ...");
-    }
-
-
-    public static void setProgressBar(boolean status, JProgressBar progressBar, String showString) {
-        progressBar.setIndeterminate(status);
-        if (!status) {
-            progressBar.setMaximum(100);
-            progressBar.setString("OK");
-            progressBar.setStringPainted(true);
-            progressBar.setValue(progressBar.getMaximum());
-        } else {
-            progressBar.setString(showString);
-            progressBar.setStringPainted(true);
-        }
-    }
-
     private void setAutoMatch() {
         hostComboBox.setSelectedItem(null);
         hostComboBox.addActionListener(this::handleComboBoxAction);
@@ -202,8 +155,6 @@ public class Databoard extends JPanel {
             String selectedHost = hostComboBox.getSelectedItem().toString();
 
             if (getHostByList().contains(selectedHost)) {
-                progressBar.setVisible(true);
-                setProgressBar(true);
                 hostTextField.setText(selectedHost);
 
                 if (handleComboBoxWorker != null && !handleComboBoxWorker.isDone()) {
@@ -357,11 +308,6 @@ public class Databoard extends JPanel {
 
                 return null;
             }
-
-            @Override
-            protected void done() {
-                setProgressBar(false);
-            }
         };
 
         applyHostFilterWorker.execute();
@@ -374,263 +320,6 @@ public class Databoard extends JPanel {
         return new ArrayList<>();
     }
 
-    private void exportActionPerformed(ActionEvent e) {
-        String selectedHost = hostTextField.getText().trim();
-
-        if (selectedHost.isEmpty()) {
-            return;
-        }
-
-        String exportDir = selectDirectory(true);
-
-        if (exportDir.isEmpty()) {
-            return;
-        }
-
-        if (exportActionWorker != null && !exportActionWorker.isDone()) {
-            exportActionWorker.cancel(true);
-        }
-
-        exportActionWorker = new SwingWorker<List<Object[]>, Void>() {
-            @Override
-            protected List<Object[]> doInBackground() {
-                ConcurrentHashMap<String, Map<String, List<String>>> dataMap = Config.globalDataMap;
-                return exportData(selectedHost, exportDir, dataMap);
-            }
-
-            @Override
-            protected void done() {
-                try {
-                    List<Object[]> taskStatusList = get();
-                    if (!taskStatusList.isEmpty()) {
-                        JOptionPane.showMessageDialog(Databoard.this, generateTaskStatusPane(taskStatusList), "Info", JOptionPane.INFORMATION_MESSAGE);
-                    }
-                } catch (Exception ignored) {
-                }
-            }
-        };
-
-        exportActionWorker.execute();
-    }
-
-    private JScrollPane generateTaskStatusPane(List<Object[]> dataList) {
-        String[] columnNames = {"#", "Filename", "Status"};
-        DefaultTableModel taskStatusTableModel = new DefaultTableModel(columnNames, 0);
-        JTable taskStatusTable = new JTable(taskStatusTableModel);
-
-        for (Object[] data : dataList) {
-            int rowCount = taskStatusTable.getRowCount();
-            int id = rowCount > 0 ? (Integer) taskStatusTable.getValueAt(rowCount - 1, 0) + 1 : 1;
-            Object[] rowData = new Object[data.length + 1];
-            rowData[0] = id;
-            System.arraycopy(data, 0, rowData, 1, data.length);
-            taskStatusTableModel.addRow(rowData);
-        }
-
-        TableRowSorter<DefaultTableModel> sorter = new TableRowSorter<>(taskStatusTableModel);
-        taskStatusTable.setRowSorter(sorter);
-
-        JScrollPane scrollPane = new JScrollPane(taskStatusTable);
-        scrollPane.setBorder(new TitledBorder("Task status"));
-        scrollPane.setPreferredSize(new Dimension(500, 300));
-
-        int paneWidth = scrollPane.getPreferredSize().width;
-        taskStatusTable.getColumnModel().getColumn(0).setPreferredWidth((int) (paneWidth * 0.1));
-        taskStatusTable.getColumnModel().getColumn(1).setPreferredWidth((int) (paneWidth * 0.7));
-        taskStatusTable.getColumnModel().getColumn(2).setPreferredWidth((int) (paneWidth * 0.2));
-
-        return scrollPane;
-    }
-
-    private List<Object[]> exportData(String selectedHost, String exportDir, Map<String, Map<String, List<String>>> dataMap) {
-        return dataMap.entrySet().stream()
-                .filter(entry -> selectedHost.equals("*") || StringProcessor.matchesHostPattern(entry.getKey(), selectedHost))
-                .filter(entry -> !entry.getKey().contains("*"))
-                .map(entry -> exportEntry(entry, exportDir))
-                .filter(Objects::nonNull)
-                .collect(Collectors.toList());
-    }
-
-    private Object[] exportEntry(Map.Entry<String, Map<String, List<String>>> entry, String exportDir) {
-        String key = entry.getKey();
-        Map<String, List<String>> ruleMap = entry.getValue();
-
-        if (ruleMap == null || ruleMap.isEmpty()) {
-            return null;
-        }
-
-        List<MessageEntry> messageEntryList = messageTableModel.getLogs();
-
-        Map<MessageEntry, String> entryUUIDMap = messageEntryList.stream()
-                .collect(Collectors.toMap(
-                        messageEntry -> messageEntry,
-                        messageEntry -> StringProcessor.getRandomUUID(),
-                        (existing, replacement) -> existing
-                ));
-
-        Map<String, Map<String, Object>> httpMap = processEntries(
-                messageEntryList,
-                key,
-                entryUUIDMap,
-                this::createHttpItemMap
-        );
-
-        Map<String, Map<String, Object>> urlMap = processEntries(
-                messageEntryList,
-                key,
-                entryUUIDMap,
-                this::creteUrlItemMap
-        );
-
-        String hostName = key.replace(":", "_");
-        String filename = String.format("%s/%s-%s.hae", exportDir, StringProcessor.getCurrentTime(), hostName);
-        boolean createdStatus = projectProcessor.createHaeFile(filename, key, ruleMap, urlMap, httpMap);
-
-        return new Object[]{filename, createdStatus};
-    }
-
-
-    private Map<String, Map<String, Object>> processEntries(List<MessageEntry> messageEntryList, String key, Map<MessageEntry, String> entryUUIDMap, Function<MessageEntry, Map<String, Object>> mapFunction) {
-        return messageEntryList.stream()
-                .filter(messageEntry -> !StringProcessor.getHostByUrl(messageEntry.getUrl()).isEmpty())
-                .filter(messageEntry -> StringProcessor.getHostByUrl(messageEntry.getUrl()).equals(key))
-                .collect(Collectors.toMap(
-                        entryUUIDMap::get,
-                        mapFunction,
-                        (existing, replacement) -> existing
-                ));
-    }
-
-    private Map<String, Object> creteUrlItemMap(MessageEntry entry) {
-        Map<String, Object> urlItemMap = new LinkedHashMap<>();
-        urlItemMap.put("url", entry.getUrl());
-        urlItemMap.put("method", entry.getMethod());
-        urlItemMap.put("status", entry.getStatus());
-        urlItemMap.put("length", entry.getLength());
-        urlItemMap.put("comment", entry.getComment());
-        urlItemMap.put("color", entry.getColor());
-        urlItemMap.put("size", String.valueOf(entry.getRequestResponse().request().toByteArray().length()));
-        return urlItemMap;
-    }
-
-    private Map<String, Object> createHttpItemMap(MessageEntry entry) {
-        Map<String, Object> httpItemMap = new LinkedHashMap<>();
-        httpItemMap.put("request", entry.getRequestResponse().request().toByteArray().getBytes());
-        httpItemMap.put("response", entry.getRequestResponse().response().toByteArray().getBytes());
-        return httpItemMap;
-    }
-
-    private void importActionPerformed(ActionEvent e) {
-        String exportDir = selectDirectory(false);
-        if (exportDir.isEmpty()) {
-            return;
-        }
-
-        if (importActionWorker != null && !importActionWorker.isDone()) {
-            importActionWorker.cancel(true);
-        }
-
-        importActionWorker = new SwingWorker<List<Object[]>, Void>() {
-            @Override
-            protected List<Object[]> doInBackground() {
-                List<String> filesWithExtension = findFilesWithExtension(new File(exportDir), ".hae");
-                return filesWithExtension.stream()
-                        .map(Databoard.this::importData)
-                        .collect(Collectors.toList());
-            }
-
-            @Override
-            protected void done() {
-                try {
-                    List<Object[]> taskStatusList = get();
-                    if (!taskStatusList.isEmpty()) {
-                        JOptionPane.showMessageDialog(Databoard.this, generateTaskStatusPane(taskStatusList), "Info", JOptionPane.INFORMATION_MESSAGE);
-                    }
-                } catch (Exception ignored) {
-                }
-            }
-        };
-
-        importActionWorker.execute();
-    }
-
-    private Object[] importData(String filename) {
-        ExecutorService executor = Executors.newFixedThreadPool(Runtime.getRuntime().availableProcessors() * 2);
-
-        HaeFileContent haeFileContent = projectProcessor.readHaeFile(filename);
-        boolean readStatus = haeFileContent != null;
-
-        List<Callable<Void>> tasks = new ArrayList<>();
-
-        if (readStatus) {
-            try {
-                String host = haeFileContent.getHost();
-                haeFileContent.getDataMap().forEach((key, value) -> RegularMatcher.putDataToGlobalMap(host, key, value));
-
-                haeFileContent.getUrlMap().forEach((key, urlItemMap) -> {
-                    tasks.add(() -> {
-                        String url = urlItemMap.get("url");
-                        String comment = urlItemMap.get("comment");
-                        String color = urlItemMap.get("color");
-                        String length = urlItemMap.get("length");
-                        String method = urlItemMap.get("method");
-                        String status = urlItemMap.get("status");
-                        String path = haeFileContent.getHttpPath();
-
-                        messageTableModel.add(null, url, method, status, length, comment, color, key, path);
-                        return null;
-                    });
-                });
-
-                executor.invokeAll(tasks);
-            } catch (Exception e) {
-                api.logging().logToError("importData: " + e.getMessage());
-            } finally {
-                executor.shutdown();
-            }
-        }
-
-        return new Object[]{filename, readStatus};
-    }
-
-    private List<String> findFilesWithExtension(File directory, String extension) {
-        List<String> filePaths = new ArrayList<>();
-        if (directory.isDirectory()) {
-            File[] files = directory.listFiles();
-            if (files != null) {
-                for (File file : files) {
-                    if (file.isDirectory()) {
-                        filePaths.addAll(findFilesWithExtension(file, extension));
-                    } else if (file.isFile() && file.getName().toLowerCase().endsWith(extension)) {
-                        filePaths.add(file.getAbsolutePath());
-                    }
-                }
-            }
-        } else {
-            filePaths.add(directory.getAbsolutePath());
-        }
-        return filePaths;
-    }
-
-    private String selectDirectory(boolean forDirectories) {
-        JFileChooser chooser = new JFileChooser();
-        chooser.setCurrentDirectory(new java.io.File(configLoader.getRulesFilePath()));
-        chooser.setDialogTitle(String.format("Select a Directory%s", forDirectories ? "" : " or File"));
-        FileNameExtensionFilter filter = new FileNameExtensionFilter(".hae Files", "hae");
-        chooser.addChoosableFileFilter(filter);
-        chooser.setFileFilter(filter);
-
-        chooser.setFileSelectionMode(forDirectories ? JFileChooser.DIRECTORIES_ONLY : JFileChooser.FILES_AND_DIRECTORIES);
-        chooser.setAcceptAllFileFilterUsed(!forDirectories);
-
-        if (chooser.showOpenDialog(this) == JFileChooser.APPROVE_OPTION) {
-            File selectedDirectory = chooser.getSelectedFile();
-            return selectedDirectory.getAbsolutePath();
-        }
-
-        return "";
-    }
-
     private void clearActionPerformed(ActionEvent e) {
         int retCode = JOptionPane.showConfirmDialog(this, "Do you want to clear data?", "Info",
                 JOptionPane.YES_NO_OPTION);
@@ -638,7 +327,6 @@ public class Databoard extends JPanel {
         if (retCode == JOptionPane.YES_OPTION && !host.isEmpty()) {
             dataTabbedPane.removeAll();
             splitPane.setVisible(false);
-            progressBar.setVisible(false);
 
             Config.globalDataMap.keySet().parallelStream().forEach(key -> {
                 if (StringProcessor.matchesHostPattern(key, host) || host.equals("*")) {

src/main/java/hae/component/board/message/MessageEntry.java

@@ -11,10 +11,8 @@ public class MessageEntry {
     private final String status;
     private final String color;
     private final String method;
-    private final String hash;
-    private final String path;
 
-    MessageEntry(HttpRequestResponse requestResponse, String method, String url, String comment, String length, String color, String status, String hash, String path) {
+    MessageEntry(HttpRequestResponse requestResponse, String method, String url, String comment, String length, String color, String status) {
         this.requestResponse = requestResponse;
         this.method = method;
         this.url = url;
@@ -22,8 +20,6 @@ public class MessageEntry {
         this.length = length;
         this.color = color;
         this.status = status;
-        this.hash = hash;
-        this.path = path;
     }
 
     public String getColor() {
@@ -53,12 +49,4 @@ public class MessageEntry {
     public HttpRequestResponse getRequestResponse() {
         return this.requestResponse;
     }
-
-    public String getHash() {
-        return this.hash;
-    }
-
-    public String getPath() {
-        return this.path;
-    }
 }

src/main/java/hae/component/board/message/MessageTableModel.java

@@ -1,17 +1,18 @@
 package hae.component.board.message;
 
 import burp.api.montoya.MontoyaApi;
-import burp.api.montoya.core.ByteArray;
 import burp.api.montoya.http.message.HttpHeader;
 import burp.api.montoya.http.message.HttpRequestResponse;
 import burp.api.montoya.http.message.requests.HttpRequest;
 import burp.api.montoya.http.message.responses.HttpResponse;
+import burp.api.montoya.persistence.PersistedObject;
 import burp.api.montoya.ui.UserInterface;
 import burp.api.montoya.ui.editor.HttpRequestEditor;
 import burp.api.montoya.ui.editor.HttpResponseEditor;
 import hae.Config;
 import hae.cache.CachePool;
-import hae.utils.project.FileProcessor;
+import hae.utils.ConfigLoader;
+import hae.utils.DataManager;
 import hae.utils.string.HashCalculator;
 import hae.utils.string.StringProcessor;
 
@@ -23,6 +24,8 @@ import javax.swing.table.TableRowSorter;
 import java.nio.charset.StandardCharsets;
 import java.text.MessageFormat;
 import java.util.*;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
 import java.util.concurrent.atomic.AtomicBoolean;
 import java.util.stream.Collectors;
 
@@ -30,15 +33,17 @@ import static burp.api.montoya.ui.editor.EditorOptions.READ_ONLY;
 
 public class MessageTableModel extends AbstractTableModel {
     private final MontoyaApi api;
+    private final ConfigLoader configLoader;
     private final MessageTable messageTable;
     private final JSplitPane splitPane;
     private final LinkedList<MessageEntry> log = new LinkedList<>();
     private final LinkedList<MessageEntry> filteredLog;
     private SwingWorker<Void, Void> currentWorker;
 
-    public MessageTableModel(MontoyaApi api) {
+    public MessageTableModel(MontoyaApi api, ConfigLoader configLoader) {
         this.filteredLog = new LinkedList<>();
         this.api = api;
+        this.configLoader = configLoader;
 
         JTabbedPane messageTab = new JTabbedPane();
         UserInterface userInterface = api.userInterface();
@@ -93,10 +98,10 @@ public class MessageTableModel extends AbstractTableModel {
         splitPane.setRightComponent(messageTab);
     }
 
-    public void add(HttpRequestResponse messageInfo, String url, String method, String status, String length, String comment, String color, String hash, String path) {
+    public void add(HttpRequestResponse messageInfo, String url, String method, String status, String length, String comment, String color, boolean flag) {
         synchronized (log) {
             boolean isDuplicate = false;
-            MessageEntry logEntry = new MessageEntry(messageInfo, method, url, comment, length, color, status, hash, path);
+            MessageEntry logEntry = new MessageEntry(messageInfo, method, url, comment, length, color, status);
 
             byte[] reqByteA = new byte[0];
             byte[] resByteA = new byte[0];
@@ -130,6 +135,18 @@ public class MessageTableModel extends AbstractTableModel {
             }
 
             if (!isDuplicate) {
+                if (flag) {
+                    DataManager dataManager = new DataManager(api);
+                    // 数据存储在BurpSuite空间内
+                    PersistedObject persistedObject = PersistedObject.persistedObject();
+                    persistedObject.setHttpRequestResponse("messageInfo", messageInfo);
+                    persistedObject.setString("comment", comment);
+                    persistedObject.setString("color", color);
+                    String uuidIndex = StringProcessor.getRandomUUID();
+                    dataManager.putData("message", uuidIndex, persistedObject);
+                }
+
+                // 添加进日志
                 log.add(logEntry);
             }
         }
@@ -173,11 +190,10 @@ public class MessageTableModel extends AbstractTableModel {
         filteredLog.clear();
 
         log.forEach(entry -> {
-            MessageEntry finalEntry = getEntryByFile(entry);
-            String host = StringProcessor.getHostByUrl(finalEntry.getUrl());
+            String host = StringProcessor.getHostByUrl(entry.getUrl());
             if (!host.isEmpty()) {
                 if (StringProcessor.matchesHostPattern(host, filterText) || filterText.contains("*")) {
-                    filteredLog.add(finalEntry);
+                    filteredLog.add(entry);
                 }
             }
         });
@@ -185,34 +201,6 @@ public class MessageTableModel extends AbstractTableModel {
         fireTableDataChanged();
     }
 
-    private MessageEntry getEntryByFile(MessageEntry entry) {
-        HttpRequestResponse requestResponse = entry.getRequestResponse();
-        if (requestResponse == null) {
-            String url = entry.getUrl();
-            String method = entry.getMethod();
-            String status = entry.getStatus();
-            String comment = entry.getComment();
-            String color = entry.getColor();
-            String path = entry.getPath();
-            String hash = entry.getHash();
-            int length = Integer.parseInt(entry.getLength());
-
-            byte[] contents = FileProcessor.readFileContent(path, hash);
-
-            if (contents.length > length) {
-                byte[] response = Arrays.copyOf(contents, length);
-                byte[] request = Arrays.copyOfRange(contents, length, contents.length);
-                requestResponse = StringProcessor.createHttpRequestResponse(url, request, response);
-
-                int index = log.indexOf(entry);
-                entry = new MessageEntry(requestResponse, method, url, comment, String.valueOf(length), color, status, "", "");
-                log.set(index, entry);
-            }
-        }
-
-        return entry;
-    }
-
     public void applyMessageFilter(String tableName, String filterText) {
         filteredLog.clear();
         for (MessageEntry entry : log) {
@@ -435,7 +423,7 @@ public class MessageTableModel extends AbstractTableModel {
 
     public class MessageTable extends JTable {
         private MessageEntry messageEntry;
-        private SwingWorker<ByteArray[], Void> currentWorker;
+        private final ExecutorService executorService;
         private int lastSelectedIndex = -1;
         private final HttpRequestEditor requestEditor;
         private final HttpResponseEditor responseEditor;
@@ -444,52 +432,31 @@ public class MessageTableModel extends AbstractTableModel {
             super(messageTableModel);
             this.requestEditor = requestEditor;
             this.responseEditor = responseEditor;
+            this.executorService = Executors.newSingleThreadExecutor();
         }
 
         @Override
         public void changeSelection(int row, int col, boolean toggle, boolean extend) {
             super.changeSelection(row, col, toggle, extend);
-
-            if (currentWorker != null && !currentWorker.isDone()) {
-                currentWorker.cancel(true);
+            int selectedIndex = convertRowIndexToModel(row);
+            if (lastSelectedIndex != selectedIndex) {
+                lastSelectedIndex = selectedIndex;
+                executorService.execute(this::getSelectedMessage);
             }
+        }
 
-            currentWorker = new SwingWorker<>() {
-                @Override
-                protected ByteArray[] doInBackground() {
-                    int selectedIndex = convertRowIndexToModel(row);
-                    if (lastSelectedIndex != selectedIndex) {
-                        lastSelectedIndex = selectedIndex;
-                        messageEntry = filteredLog.get(selectedIndex);
+        private void getSelectedMessage() {
+            messageEntry = filteredLog.get(lastSelectedIndex);
 
-                        HttpRequestResponse httpRequestResponse = messageEntry.getRequestResponse();
+            HttpRequestResponse httpRequestResponse = messageEntry.getRequestResponse();
 
-                        ByteArray requestByte = httpRequestResponse.request().toByteArray();
-                        ByteArray responseByte = httpRequestResponse.response().toByteArray();
-
-                        ByteArray[] httpByteArray = new ByteArray[2];
-                        httpByteArray[0] = requestByte;
-                        httpByteArray[1] = responseByte;
-                        return httpByteArray;
-                    }
-
-                    return null;
-                }
-
-                @Override
-                protected void done() {
-                    try {
-                        ByteArray[] retByteArray = get();
-                        if (retByteArray != null) {
-                            requestEditor.setRequest(HttpRequest.httpRequest(messageEntry.getRequestResponse().httpService(), retByteArray[0]));
-                            responseEditor.setResponse(HttpResponse.httpResponse(retByteArray[1]));
-                        }
-                    } catch (Exception ignored) {
-                    }
-                }
-            };
-
-            currentWorker.execute();
+            requestEditor.setRequest(HttpRequest.httpRequest(messageEntry.getRequestResponse().httpService(), httpRequestResponse.request().toByteArray()));
+            int responseSizeWithMb = httpRequestResponse.response().toString().length() / 1024 / 1024;
+            if ((responseSizeWithMb < Integer.parseInt(configLoader.getLimitSize())) || configLoader.getLimitSize().equals("0")) {
+                responseEditor.setResponse(httpRequestResponse.response());
+            } else {
+                responseEditor.setResponse(HttpResponse.httpResponse("Exceeds length limit."));
+            }
         }
     }
 }

src/main/java/hae/component/board/table/AIPower.java

@@ -1,157 +0,0 @@
-package hae.component.board.table;
-
-import burp.api.montoya.MontoyaApi;
-import burp.api.montoya.http.RequestOptions;
-import burp.api.montoya.http.message.HttpRequestResponse;
-import burp.api.montoya.http.message.requests.HttpRequest;
-import com.google.gson.Gson;
-import com.google.gson.GsonBuilder;
-import com.google.gson.reflect.TypeToken;
-import hae.Config;
-import hae.utils.ConfigLoader;
-import hae.utils.http.HttpUtils;
-import okhttp3.*;
-
-import java.io.BufferedReader;
-import java.io.IOException;
-import java.io.InputStreamReader;
-import java.lang.reflect.Type;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-import java.util.Random;
-import java.util.regex.Matcher;
-import java.util.regex.Pattern;
-
-public class AIPower {
-    private final MontoyaApi api;
-    private final HttpUtils httpUtils;
-    private final ConfigLoader configLoader;
-    private final String apiAuth;
-    private final String aiModel;
-    private final String aiBaseUrl;
-
-    public AIPower(MontoyaApi api, ConfigLoader configLoader, String aiModel, String aiBaseUrl, String[] apiKey) {
-        this.api = api;
-        this.configLoader = configLoader;
-        this.httpUtils = new HttpUtils(api, configLoader);
-        this.aiModel = aiModel;
-        this.aiBaseUrl = aiBaseUrl;
-
-        this.apiAuth = String.format("Bearer %s", apiKey[new Random().nextInt(apiKey.length)]);
-    }
-
-    // Stream Response
-    public String chatWithAPI(String ruleName, String data) {
-        OkHttpClient httpClient = new OkHttpClient();
-        String fileId = uploadFileToAIService(ruleName, data);
-        Gson gson = new Gson();
-
-        if (fileId != null) {
-            String chatUrl = String.format("%s/chat/completions", aiBaseUrl);
-            String chatMessage = generateJsonData(configLoader.getAIPrompt(), fileId);
-            Request request = new Request.Builder()
-                    .url(chatUrl)
-                    .header("Authorization", apiAuth)
-                    .post(RequestBody.create(MediaType.parse("application/json"), chatMessage))
-                    .build();
-
-            try (Response response = httpClient.newCall(request).execute()) {
-                if (!response.isSuccessful()) {
-                    throw new IOException("Unexpected code " + response);
-                }
-
-                BufferedReader reader = new BufferedReader(new InputStreamReader(response.body().byteStream()));
-                StringBuilder chatReturn = new StringBuilder();
-                String line;
-
-                while ((line = reader.readLine()) != null) {
-                    if (line.startsWith("data: ") && !line.contains("[DONE]")) {
-                        String jsonData = line.substring(6);
-                        Type type = new TypeToken<Map<String, Object>>() {
-                        }.getType();
-                        Map<String, Object> map = gson.fromJson(jsonData, type);
-                        String content = getDeltaContent(map);
-                        if (content != null) {
-                            chatReturn.append(content);
-                        }
-                    }
-                }
-
-                deleteFileOnAIService(fileId);
-
-                return chatReturn.toString();
-            } catch (Exception e) {
-                return "";
-            }
-        }
-
-        return "";
-    }
-
-    private String getDeltaContent(Map<String, Object> map) {
-        List<Map<String, Map<String, String>>> choices = (List<Map<String, Map<String, String>>>) map.get("choices");
-        if (choices != null && !choices.isEmpty()) {
-            Map<String, String> delta = choices.get(0).get("delta");
-            return delta.get("content");
-        }
-        return null;
-    }
-
-    private String uploadFileToAIService(String ruleName, String data) {
-        String uploadUrl = String.format("%s/files", aiBaseUrl);
-        String uploadParam = "file";
-        String filename = "hae.txt";
-        String content = String.format(Config.userTextFormat, ruleName, data);
-
-        HttpRequest uploadFileRequest = httpUtils.generateRequestByMultipartUploadMethod(uploadUrl, uploadParam, filename, content).withAddedHeader("Authorization", apiAuth);
-
-        HttpRequestResponse uploadFileRequestResponse = api.http().sendRequest(uploadFileRequest, RequestOptions.requestOptions().withUpstreamTLSVerification());
-        String responseBody = uploadFileRequestResponse.response().bodyToString();
-        Pattern pattern = Pattern.compile("\"id\":\"(.*?)\",");
-        Matcher matcher = pattern.matcher(responseBody);
-
-        return matcher.find() ? matcher.group(1) : null;
-    }
-
-    private void deleteFileOnAIService(String fileId) {
-        String deleteFileUrl = String.format("%s/files/%s", aiBaseUrl, fileId);
-        HttpRequest deleteFileRequest = httpUtils.generateRequestByDeleteMethod(deleteFileUrl).withAddedHeader("Authorization", apiAuth);
-        api.http().sendRequest(deleteFileRequest, RequestOptions.requestOptions().withUpstreamTLSVerification());
-    }
-
-    private String getFileContentOnAiService(String fileId) {
-        String getFileContentUrl = String.format("%s/files/%s/content", aiBaseUrl, fileId);
-        HttpRequest getFileContentRequest = HttpRequest.httpRequestFromUrl(getFileContentUrl).withAddedHeader("Authorization", apiAuth);
-        HttpRequestResponse getFileRequestResponse = api.http().sendRequest(getFileContentRequest, RequestOptions.requestOptions().withUpstreamTLSVerification());
-        String responseBody = getFileRequestResponse.response().bodyToString();
-        Pattern pattern = Pattern.compile("\"content\":\"(.*?)\",\"file_type\"");
-        Matcher matcher = pattern.matcher(responseBody);
-
-        return matcher.find() ? matcher.group(1) : null;
-    }
-
-    private String generateJsonData(String prompt, String fileId) {
-        Map<String, Object> data = new HashMap<>();
-        data.put("model", aiModel);
-        data.put("stream", true);
-        data.put("messages", new Object[]{
-                new HashMap<String, Object>() {{
-                    put("role", "system");
-                    put("content", prompt);
-                }},
-                new HashMap<String, Object>() {{
-                    put("role", "system");
-                    put("content", aiModel.equals("qwen-long") ? String.format("fileid://%s", fileId) : getFileContentOnAiService(fileId));
-                }},
-                new HashMap<String, Object>() {{
-                    put("role", "user");
-                    put("content", "Start");
-                }}
-        });
-
-        Gson gson = new GsonBuilder().setPrettyPrinting().create();
-        return gson.toJson(data);
-    }
-
-}

src/main/java/hae/component/board/table/Datatable.java

@@ -1,9 +1,6 @@
 package hae.component.board.table;
 
 import burp.api.montoya.MontoyaApi;
-import com.google.gson.Gson;
-import com.google.gson.reflect.TypeToken;
-import hae.component.board.Databoard;
 import hae.component.board.message.MessageTableModel;
 import hae.utils.ConfigLoader;
 import hae.utils.UIEnhancer;
@@ -11,21 +8,17 @@ import hae.utils.UIEnhancer;
 import javax.swing.*;
 import javax.swing.event.DocumentEvent;
 import javax.swing.event.DocumentListener;
-import javax.swing.event.PopupMenuEvent;
-import javax.swing.event.PopupMenuListener;
 import javax.swing.table.DefaultTableModel;
 import javax.swing.table.TableColumn;
 import javax.swing.table.TableRowSorter;
 import java.awt.*;
 import java.awt.datatransfer.Clipboard;
 import java.awt.datatransfer.StringSelection;
-import java.awt.event.ActionEvent;
 import java.awt.event.MouseAdapter;
 import java.awt.event.MouseEvent;
-import java.lang.reflect.Type;
+import java.util.ArrayList;
 import java.util.Comparator;
 import java.util.List;
-import java.util.Map;
 import java.util.regex.Pattern;
 
 public class Datatable extends JPanel {
@@ -34,34 +27,30 @@ public class Datatable extends JPanel {
     private final JTable dataTable;
     private final DefaultTableModel dataTableModel;
     private final JTextField searchField;
+    private final JTextField secondSearchField;
     private final TableRowSorter<DefaultTableModel> sorter;
     private final JCheckBox searchMode = new JCheckBox("Reverse search");
     private final String tabName;
-    private final JProgressBar progressBar;
-    private final JPopupMenu aiEmpoweredMenu;
     private final JPanel footerPanel;
 
     public Datatable(MontoyaApi api, ConfigLoader configLoader, String tabName, List<String> dataList) {
         this.api = api;
         this.configLoader = configLoader;
         this.tabName = tabName;
-        this.progressBar = new JProgressBar();
 
         String[] columnNames = {"#", "Information"};
         this.dataTableModel = new DefaultTableModel(columnNames, 0);
 
         this.dataTable = new JTable(dataTableModel);
         this.sorter = new TableRowSorter<>(dataTableModel);
-        this.searchField = new JTextField();
-        this.aiEmpoweredMenu = new JPopupMenu();
+        this.searchField = new JTextField(10);
+        this.secondSearchField = new JTextField(10);
         this.footerPanel = new JPanel(new BorderLayout(0, 5));
 
         initComponents(dataList);
     }
 
     private void initComponents(List<String> dataList) {
-        progressBar.setVisible(false);
-
         // 设置ID排序
         sorter.setComparator(0, new Comparator<Integer>() {
             @Override
@@ -70,21 +59,13 @@ public class Datatable extends JPanel {
             }
         });
 
-        dataTable.setRowSorter(sorter);
-        TableColumn idColumn = dataTable.getColumnModel().getColumn(0);
-        idColumn.setMaxWidth(50);
-
         for (String item : dataList) {
             if (!item.isEmpty()) {
                 addRowToTable(new Object[]{item});
             }
         }
 
-        // 设置灰色默认文本
-        String searchText = "Search";
-        UIEnhancer.setTextFieldPlaceholder(searchField, searchText);
-
-        // 监听输入框内容输入、更新、删除
+        UIEnhancer.setTextFieldPlaceholder(searchField, "Search");
         searchField.getDocument().addDocumentListener(new DocumentListener() {
             @Override
             public void insertUpdate(DocumentEvent e) {
@@ -103,10 +84,34 @@ public class Datatable extends JPanel {
 
         });
 
+        UIEnhancer.setTextFieldPlaceholder(secondSearchField, "Second search");
+        secondSearchField.getDocument().addDocumentListener(new DocumentListener() {
+            @Override
+            public void insertUpdate(DocumentEvent e) {
+                performSearch();
+            }
+
+            @Override
+            public void removeUpdate(DocumentEvent e) {
+                performSearch();
+            }
+
+            @Override
+            public void changedUpdate(DocumentEvent e) {
+                performSearch();
+            }
+
+        });
+
         // 设置布局
         JScrollPane scrollPane = new JScrollPane(dataTable);
         scrollPane.setVerticalScrollBarPolicy(ScrollPaneConstants.VERTICAL_SCROLLBAR_ALWAYS);
 
+        dataTable.setRowSorter(sorter);
+        TableColumn idColumn = dataTable.getColumnModel().getColumn(0);
+        idColumn.setPreferredWidth(50);
+        idColumn.setMaxWidth(100);
+
         setLayout(new BorderLayout(0, 5));
 
         JPanel optionsPanel = new JPanel();
@@ -123,55 +128,17 @@ public class Datatable extends JPanel {
         JButton settingsButton = new JButton("Settings");
         setMenuShow(settingMenu, settingsButton);
 
-        // AI Empowered按钮
-        JPanel aiEmpoweredPanel = new JPanel(new GridLayout(2, 1));
-        aiEmpoweredPanel.setBorder(BorderFactory.createEmptyBorder(3, 3, 3, 3));
-        JButton empoweredByAlibabaButton = new JButton("Alibaba - QwenLong");
-        empoweredByAlibabaButton.addActionListener(e -> {
-            aiEmpoweredByAlibabaActionPerformed(e, tabName, getTableData(dataTable));
-        });
-        JButton empoweredByMoonshotButton = new JButton("Moonshot - Kimi");
-        empoweredByMoonshotButton.addActionListener(e -> {
-            aiEmpoweredByMoonshotActionPerformed(e, tabName, getTableData(dataTable));
-        });
-        aiEmpoweredPanel.add(empoweredByAlibabaButton);
-        aiEmpoweredPanel.add(empoweredByMoonshotButton);
-        aiEmpoweredMenu.add(aiEmpoweredPanel);
-
-        JButton aiEmpoweredButton = new JButton("AI Empowered");
-        setMenuShow(aiEmpoweredMenu, aiEmpoweredButton);
-        aiEmpoweredMenu.addPopupMenuListener(new PopupMenuListener() {
-            @Override
-            public void popupMenuWillBecomeVisible(PopupMenuEvent e) {
-                empoweredByAlibabaButton.setEnabled(!configLoader.getAlibabaAIAPIKey().isEmpty());
-                empoweredByMoonshotButton.setEnabled(!configLoader.getMoonshotAIAPIKey().isEmpty());
-            }
-
-            @Override
-            public void popupMenuWillBecomeInvisible(PopupMenuEvent e) {
-
-            }
-
-            @Override
-            public void popupMenuCanceled(PopupMenuEvent e) {
-
-            }
-        });
-
         optionsPanel.add(settingsButton);
         optionsPanel.add(Box.createHorizontalStrut(5));
         optionsPanel.add(searchField);
         optionsPanel.add(Box.createHorizontalStrut(5));
-        optionsPanel.add(aiEmpoweredButton);
+        optionsPanel.add(secondSearchField);
 
         footerPanel.setBorder(BorderFactory.createEmptyBorder(2, 3, 5, 3));
         footerPanel.add(optionsPanel, BorderLayout.CENTER);
-        footerPanel.add(progressBar, BorderLayout.SOUTH);
 
         add(scrollPane, BorderLayout.CENTER);
         add(footerPanel, BorderLayout.SOUTH);
-
-        setProgressBar(false);
     }
 
     private void setMenuShow(JPopupMenu menu, JButton button) {
@@ -184,9 +151,6 @@ public class Datatable extends JPanel {
         });
     }
 
-    private void setProgressBar(boolean status) {
-        Databoard.setProgressBar(status, progressBar, "AI+ ...");
-    }
 
     private void addRowToTable(Object[] data) {
         int rowCount = dataTableModel.getRowCount();
@@ -197,82 +161,60 @@ public class Datatable extends JPanel {
         dataTableModel.addRow(rowData);
     }
 
-    private void aiEmpoweredByAlibabaActionPerformed(ActionEvent e, String ruleName, String data) {
-        AIPower aiPower = new AIPower(api, configLoader, "qwen-long", "https://dashscope.aliyuncs.com/compatible-mode/v1", configLoader.getAlibabaAIAPIKey().split("\\|"));
-        aiEmpoweredButtonAction(ruleName, data, aiPower);
-    }
-
-    private void aiEmpoweredByMoonshotActionPerformed(ActionEvent e, String ruleName, String data) {
-        AIPower aiPower = new AIPower(api, configLoader, "moonshot-v1-128k", "https://api.moonshot.cn/v1", configLoader.getMoonshotAIAPIKey().split("\\|"));
-        aiEmpoweredButtonAction(ruleName, data, aiPower);
-    }
-
-    private void aiEmpoweredButtonAction(String ruleName, String data, AIPower aiPower) {
-        progressBar.setVisible(true);
-        aiEmpoweredMenu.setVisible(true);
-        setProgressBar(true);
-
-        SwingWorker<String, Void> worker = new SwingWorker<String, Void>() {
-            @Override
-            protected String doInBackground() throws Exception {
-                return aiPower.chatWithAPI(ruleName, data);
+    private void performSearch() {
+        RowFilter<Object, Object> firstRowFilter = applyFirstSearchFilter();
+        RowFilter<Object, Object> secondRowFilter = applySecondFilter();
+        if (searchField.getForeground().equals(Color.BLACK)) {
+            sorter.setRowFilter(firstRowFilter);
+            if (secondSearchField.getForeground().equals(Color.BLACK)) {
+                List<RowFilter<Object, Object>> filters = new ArrayList<>();
+                filters.add(firstRowFilter);
+                filters.add(secondRowFilter);
+                sorter.setRowFilter(RowFilter.andFilter(filters));
             }
+        }
+    }
 
-            @Override
-            protected void done() {
-                setProgressBar(false);
-
+    private RowFilter<Object, Object> applyFirstSearchFilter() {
+        return new RowFilter<Object, Object>() {
+            public boolean include(Entry<?, ?> entry) {
+                String searchFieldTextText = searchField.getText();
+                Pattern pattern = null;
                 try {
-                    String chatReturn = get();
-                    if (!chatReturn.isEmpty()) {
-                        Gson gson = new Gson();
-                        Type type = new TypeToken<Map<String, Object>>() {
-                        }.getType();
-                        Map<String, List<String>> map = gson.fromJson(chatReturn, type);
-
-                        dataTableModel.setRowCount(0);
-                        for (String item : map.get("data")) {
-                            if (!item.isEmpty()) {
-                                addRowToTable(new Object[]{item});
-                            }
-                        }
-
-                        JOptionPane.showMessageDialog(Datatable.this, "AI+ has completed the AI empowered work.", "AI+ Info", JOptionPane.INFORMATION_MESSAGE);
-                    } else {
-                        JOptionPane.showMessageDialog(Datatable.this, "AI+ returns null, please check!", "AI+ Info", JOptionPane.WARNING_MESSAGE);
-                    }
+                    pattern = Pattern.compile(searchFieldTextText, Pattern.CASE_INSENSITIVE);
                 } catch (Exception ignored) {
-                    JOptionPane.showMessageDialog(Datatable.this, "AI+ returns error, please check!", "AI+ Info", JOptionPane.ERROR_MESSAGE);
+                }
+
+                String entryValue = ((String) entry.getValue(1)).toLowerCase();
+                searchFieldTextText = searchFieldTextText.toLowerCase();
+                if (pattern != null) {
+                    return searchFieldTextText.isEmpty() || pattern.matcher(entryValue).find() != searchMode.isSelected();
+                } else {
+                    return searchFieldTextText.isEmpty() || entryValue.contains(searchFieldTextText) != searchMode.isSelected();
                 }
             }
         };
-        worker.execute();
-
-        aiEmpoweredMenu.setVisible(false);
     }
 
-    private void performSearch() {
-        if (searchField.getForeground().equals(Color.BLACK)) {
-            RowFilter<Object, Object> rowFilter = new RowFilter<Object, Object>() {
-                public boolean include(Entry<?, ?> entry) {
-                    String searchFieldTextText = searchField.getText();
-                    Pattern pattern = null;
-                    try {
-                        pattern = Pattern.compile(searchFieldTextText, Pattern.CASE_INSENSITIVE);
-                    } catch (Exception ignored) {
-                    }
-
-                    String entryValue = ((String) entry.getValue(1)).toLowerCase();
-                    searchFieldTextText = searchFieldTextText.toLowerCase();
-                    if (pattern != null) {
-                        return searchFieldTextText.isEmpty() || pattern.matcher(entryValue).find() != searchMode.isSelected();
-                    } else {
-                        return searchFieldTextText.isEmpty() || entryValue.contains(searchFieldTextText) != searchMode.isSelected();
-                    }
+    private RowFilter<Object, Object> applySecondFilter() {
+        return new RowFilter<Object, Object>() {
+            public boolean include(Entry<?, ?> entry) {
+                String searchFieldTextText = secondSearchField.getText();
+                Pattern pattern = null;
+                try {
+                    pattern = Pattern.compile(searchFieldTextText, Pattern.CASE_INSENSITIVE);
+                } catch (Exception ignored) {
                 }
-            };
-            sorter.setRowFilter(rowFilter);
-        }
+
+                String entryValue = ((String) entry.getValue(1)).toLowerCase();
+                searchFieldTextText = searchFieldTextText.toLowerCase();
+                if (pattern != null) {
+                    return searchFieldTextText.isEmpty() || pattern.matcher(entryValue).find();
+                } else {
+                    return searchFieldTextText.isEmpty() || entryValue.contains(searchFieldTextText);
+                }
+            }
+        };
     }
 
     public void setTableListener(MessageTableModel messagePanel) {

src/main/java/hae/instances/http/HttpMessageActiveHandler.java

@@ -17,7 +17,7 @@ import java.util.ArrayList;
 import java.util.List;
 import java.util.Map;
 
-public class HttpMessageHandler implements HttpHandler {
+public class HttpMessageActiveHandler implements HttpHandler {
     private final MontoyaApi api;
     private final ConfigLoader configLoader;
     private final HttpUtils httpUtils;
@@ -30,7 +30,7 @@ public class HttpMessageHandler implements HttpHandler {
     private final ThreadLocal<List<String>> colorList = ThreadLocal.withInitial(ArrayList::new);
     private final ThreadLocal<List<String>> commentList = ThreadLocal.withInitial(ArrayList::new);
 
-    public HttpMessageHandler(MontoyaApi api, ConfigLoader configLoader, MessageTableModel messageTableModel) {
+    public HttpMessageActiveHandler(MontoyaApi api, ConfigLoader configLoader, MessageTableModel messageTableModel) {
         this.api = api;
         this.configLoader = configLoader;
         this.httpUtils = new HttpUtils(api, configLoader);
@@ -68,25 +68,23 @@ public class HttpMessageHandler implements HttpHandler {
                 setColorAndCommentList(messageProcessor.processRequest(host.get(), request, true));
                 setColorAndCommentList(messageProcessor.processResponse(host.get(), httpResponseReceived, true));
 
-                // 设置高亮颜色和注释
                 if (!colorList.get().isEmpty() && !commentList.get().isEmpty()) {
+                    HttpRequestResponse httpRequestResponse = HttpRequestResponse.httpRequestResponse(request, httpResponseReceived);
+
                     String color = messageProcessor.retrieveFinalColor(messageProcessor.retrieveColorIndices(colorList.get()));
                     annotations.setHighlightColor(HighlightColor.highlightColor(color));
                     String comment = StringProcessor.mergeComment(String.join(", ", commentList.get()));
                     annotations.setNotes(comment);
 
-                    HttpRequestResponse httpRequestResponse = HttpRequestResponse.httpRequestResponse(request, httpResponseReceived);
-
                     String method = request.method();
                     String url = request.url();
                     String status = String.valueOf(httpResponseReceived.statusCode());
                     String length = String.valueOf(httpResponseReceived.toByteArray().length());
 
-                    // 后台提交，防止线程阻塞
                     new SwingWorker<Void, Void>() {
                         @Override
                         protected Void doInBackground() {
-                            messageTableModel.add(httpRequestResponse, url, method, status, length, comment, color, "", "");
+                            messageTableModel.add(httpRequestResponse, url, method, status, length, comment, color, true);
                             return null;
                         }
                     }.execute();

src/main/java/hae/instances/http/HttpMessagePassiveHandler.java

@@ -0,0 +1,97 @@
+package hae.instances.http;
+
+import burp.api.montoya.MontoyaApi;
+import burp.api.montoya.http.message.HttpRequestResponse;
+import burp.api.montoya.http.message.requests.HttpRequest;
+import burp.api.montoya.http.message.responses.HttpResponse;
+import burp.api.montoya.scanner.AuditResult;
+import burp.api.montoya.scanner.ConsolidationAction;
+import burp.api.montoya.scanner.ScanCheck;
+import burp.api.montoya.scanner.audit.insertionpoint.AuditInsertionPoint;
+import burp.api.montoya.scanner.audit.issues.AuditIssue;
+import hae.component.board.message.MessageTableModel;
+import hae.instances.http.utils.MessageProcessor;
+import hae.utils.ConfigLoader;
+import hae.utils.http.HttpUtils;
+import hae.utils.string.StringProcessor;
+
+import javax.swing.*;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import static burp.api.montoya.scanner.AuditResult.auditResult;
+import static burp.api.montoya.scanner.ConsolidationAction.KEEP_BOTH;
+import static burp.api.montoya.scanner.ConsolidationAction.KEEP_EXISTING;
+import static java.util.Collections.emptyList;
+
+public class HttpMessagePassiveHandler implements ScanCheck {
+    private final MontoyaApi api;
+    private final ConfigLoader configLoader;
+    private final HttpUtils httpUtils;
+    private final MessageTableModel messageTableModel;
+    private final MessageProcessor messageProcessor;
+
+    public HttpMessagePassiveHandler(MontoyaApi api, ConfigLoader configLoader, MessageTableModel messageTableModel) {
+        this.api = api;
+        this.configLoader = configLoader;
+        this.httpUtils = new HttpUtils(api, configLoader);
+        this.messageTableModel = messageTableModel;
+        this.messageProcessor = new MessageProcessor(api);
+    }
+
+    @Override
+    public AuditResult activeAudit(HttpRequestResponse httpRequestResponse, AuditInsertionPoint auditInsertionPoint) {
+        return auditResult(emptyList());
+    }
+
+    @Override
+    public AuditResult passiveAudit(HttpRequestResponse httpRequestResponse) {
+        List<String> colorList = new ArrayList<>();
+        List<String> commentList = new ArrayList<>();
+
+        HttpRequest request = httpRequestResponse.request();
+        HttpResponse response = httpRequestResponse.response();
+
+        boolean matches = httpUtils.verifyHttpRequestResponse(httpRequestResponse, "Proxy");
+
+        if (!matches) {
+            try {
+                String host = StringProcessor.getHostByUrl(request.url());
+                setColorAndCommentList(messageProcessor.processRequest(host, request, true), colorList, commentList);
+                setColorAndCommentList(messageProcessor.processResponse(host, response, true), colorList, commentList);
+
+                String url = request.url();
+                String method = request.method();
+                String status = String.valueOf(response.statusCode());
+                String color = messageProcessor.retrieveFinalColor(messageProcessor.retrieveColorIndices(colorList));
+                String comment = StringProcessor.mergeComment(String.join(", ", commentList));
+                String length = String.valueOf(response.toByteArray().length());
+
+                new SwingWorker<Void, Void>() {
+                    @Override
+                    protected Void doInBackground() {
+                        messageTableModel.add(httpRequestResponse, url, method, status, length, comment, color, true);
+                        return null;
+                    }
+                }.execute();
+            } catch (Exception e) {
+                api.logging().logToError("passiveAudit: " + e.getMessage());
+            }
+        }
+
+        return auditResult(emptyList());
+    }
+
+    private void setColorAndCommentList(List<Map<String, String>> result, List<String> colorList, List<String> commentList) {
+        if (result != null && !result.isEmpty()) {
+            colorList.add(result.get(0).get("color"));
+            commentList.add(result.get(1).get("comment"));
+        }
+    }
+
+    @Override
+    public ConsolidationAction consolidateIssues(AuditIssue newIssue, AuditIssue existingIssue) {
+        return existingIssue.name().equals(newIssue.name()) ? KEEP_EXISTING : KEEP_BOTH;
+    }
+}

src/main/java/hae/instances/http/utils/RegularMatcher.java

@@ -1,12 +1,15 @@
 package hae.instances.http.utils;
 
 import burp.api.montoya.MontoyaApi;
+import burp.api.montoya.persistence.PersistedList;
+import burp.api.montoya.persistence.PersistedObject;
 import dk.brics.automaton.Automaton;
 import dk.brics.automaton.AutomatonMatcher;
 import dk.brics.automaton.RegExp;
 import dk.brics.automaton.RunAutomaton;
 import hae.Config;
 import hae.cache.CachePool;
+import hae.utils.DataManager;
 import hae.utils.string.HashCalculator;
 import hae.utils.string.StringProcessor;
 
@@ -38,7 +41,7 @@ public class RegularMatcher {
                     // 多线程执行，一定程度上减少阻塞现象
                     String matchContent = "";
                     // 遍历获取规则
-                    List<String> result = new ArrayList<>();
+                    List<String> result;
                     Map<String, Object> tmpMap = new HashMap<>();
 
                     boolean loaded = (Boolean) objects[0];
@@ -78,7 +81,7 @@ public class RegularMatcher {
                         }
 
                         try {
-                            result.addAll(matchByRegex(f_regex, s_regex, matchContent, format, engine, sensitive));
+                            result = new ArrayList<>(matchByRegex(f_regex, s_regex, matchContent, format, engine, sensitive));
                         } catch (Exception e) {
                             api.logging().logToError(String.format("[x] Error Info:\nName: %s\nRegex: %s", name, f_regex));
                             api.logging().logToError(e.getMessage());
@@ -98,7 +101,7 @@ public class RegularMatcher {
                             String nameAndSize = String.format("%s (%s)", name, result.size());
                             finalMap.put(nameAndSize, tmpMap);
 
-                            putDataToGlobalMap(host, name, result);
+                            putDataToGlobalMap(api, host, name, result, true);
                         }
                     }
                 }
@@ -108,7 +111,7 @@ public class RegularMatcher {
         }
     }
 
-    public static void putDataToGlobalMap(String host, String name, List<String> dataList) {
+    public static void putDataToGlobalMap(MontoyaApi api, String host, String name, List<String> dataList, boolean flag) {
         // 添加到全局变量中，便于Databoard检索
         if (!Objects.equals(host, "") && host != null) {
             Config.globalDataMap.compute(host, (existingHost, existingMap) -> {
@@ -120,6 +123,18 @@ public class RegularMatcher {
                     return new ArrayList<>(combinedSet);
                 });
 
+                if (flag) {
+                    // 数据存储在BurpSuite空间内
+                    DataManager dataManager = new DataManager(api);
+                    PersistedObject persistedObject = PersistedObject.persistedObject();
+                    gRuleMap.forEach((kName, vList) -> {
+                        PersistedList<String> persistedList = PersistedList.persistedStringList();
+                        persistedList.addAll(vList);
+                        persistedObject.setStringList(kName, persistedList);
+                    });
+                    dataManager.putData("data", host, persistedObject);
+                }
+
                 return gRuleMap;
             });
 
@@ -128,7 +143,7 @@ public class RegularMatcher {
 
             String anyHost = (splitHost.length > 2 && !StringProcessor.matchHostIsIp(onlyHost)) ? StringProcessor.replaceFirstOccurrence(onlyHost, splitHost[0], "*") : "";
 
-            if (!Config.globalDataMap.containsKey(anyHost) && anyHost.length() > 0) {
+            if (!Config.globalDataMap.containsKey(anyHost) && !anyHost.isEmpty()) {
                 // 添加通配符Host，实际数据从查询哪里将所有数据提取
                 Config.globalDataMap.put(anyHost, new HashMap<>());
             }

src/main/java/hae/instances/websocket/WebSocketMessageHandler.java

@@ -22,7 +22,7 @@ public class WebSocketMessageHandler implements ProxyMessageHandler {
         String message = interceptedTextMessage.payload();
         List<Map<String, String>> result = messageProcessor.processMessage("", message, true);
 
-        if (result != null && !result.isEmpty() && result.size() > 0) {
+        if (result != null && !result.isEmpty()) {
             interceptedTextMessage.annotations().setHighlightColor(HighlightColor.highlightColor(result.get(0).get("color")));
             interceptedTextMessage.annotations().setNotes(result.get(1).get("comment"));
         }

src/main/java/hae/utils/ConfigLoader.java

@@ -1,9 +1,6 @@
 package hae.utils;
 
 import burp.api.montoya.MontoyaApi;
-import burp.api.montoya.http.RequestOptions;
-import burp.api.montoya.http.message.HttpRequestResponse;
-import burp.api.montoya.http.message.requests.HttpRequest;
 import hae.Config;
 import org.yaml.snakeyaml.DumperOptions;
 import org.yaml.snakeyaml.Yaml;
@@ -46,7 +43,7 @@ public class ConfigLoader {
 
         File rulesFilePath = new File(this.rulesFilePath);
         if (!(rulesFilePath.exists() && rulesFilePath.isFile())) {
-            initRulesByRes();
+            initRules();
         }
 
         Config.globalRules = getRules();
@@ -80,6 +77,7 @@ public class ConfigLoader {
         r.put("ExcludeSuffix", getExcludeSuffix());
         r.put("BlockHost", getBlockHost());
         r.put("ExcludeStatus", getExcludeStatus());
+        r.put("LimitSize", getLimitSize());
         r.put("HaEScope", getScope());
         try {
             Writer ws = new OutputStreamWriter(Files.newOutputStream(Paths.get(configFilePath)), StandardCharsets.UTF_8);
@@ -136,18 +134,6 @@ public class ConfigLoader {
         return rules;
     }
 
-    public String getAlibabaAIAPIKey() {
-        return getValueFromConfig("AlibabaAIAPIKey", "");
-    }
-
-    public String getMoonshotAIAPIKey() {
-        return getValueFromConfig("MoonshotAIAPIKey", "");
-    }
-
-    public String getAIPrompt() {
-        return getValueFromConfig("AIPrompt", Config.prompt);
-    }
-
     public String getBlockHost() {
         return getValueFromConfig("BlockHost", Config.host);
     }
@@ -160,10 +146,18 @@ public class ConfigLoader {
         return getValueFromConfig("ExcludeStatus", Config.status);
     }
 
+    public String getLimitSize() {
+        return getValueFromConfig("LimitSize", Config.size);
+    }
+
     public String getScope() {
         return getValueFromConfig("HaEScope", Config.scopeOptions);
     }
 
+    public boolean getMode() {
+        return getValueFromConfig("HaEModeStatus", Config.modeStatus).equals("true");
+    }
+
     private String getValueFromConfig(String name, String defaultValue) {
         File yamlSetting = new File(configFilePath);
         if (!yamlSetting.exists() || !yamlSetting.isFile()) {
@@ -182,18 +176,6 @@ public class ConfigLoader {
         return defaultValue;
     }
 
-    public void setAlibabaAIAPIKey(String apiKey) {
-        setValueToConfig("AlibabaAIAPIKey", apiKey);
-    }
-
-    public void setMoonshotAIAPIKey(String apiKey) {
-        setValueToConfig("MoonshotAIAPIKey", apiKey);
-    }
-
-    public void setAIPrompt(String prompt) {
-        setValueToConfig("AIPrompt", prompt);
-    }
-
     public void setExcludeSuffix(String excludeSuffix) {
         setValueToConfig("ExcludeSuffix", excludeSuffix);
     }
@@ -206,10 +188,18 @@ public class ConfigLoader {
         setValueToConfig("ExcludeStatus", status);
     }
 
+    public void setLimitSize(String size) {
+        setValueToConfig("LimitSize", size);
+    }
+
     public void setScope(String scope) {
         setValueToConfig("HaEScope", scope);
     }
 
+    public void setMode(String mode) {
+        setValueToConfig("HaEModeStatus", mode);
+    }
+
     private void setValueToConfig(String name, String value) {
         Map<String, Object> currentConfig = loadCurrentConfig();
         currentConfig.put(name, value);
@@ -233,11 +223,12 @@ public class ConfigLoader {
         }
     }
 
-    public void initRulesByRes() {
-        boolean isCopySuccess = copyRulesToFile(this.rulesFilePath);
-        if (!isCopySuccess) {
+    public boolean initRules() {
+        boolean ret = copyRulesToFile(this.rulesFilePath);
+        if (!ret) {
             api.extension().unload();
         }
+        return ret;
     }
 
     private boolean copyRulesToFile(String targetFilePath) {
@@ -260,33 +251,4 @@ public class ConfigLoader {
 
         return false;
     }
-
-    public void initRulesByNet() {
-        Thread t = new Thread() {
-            public void run() {
-                pullRules();
-            }
-        };
-        t.start();
-        try {
-            t.join(10000);
-        } catch (Exception ignored) {
-        }
-    }
-
-    private void pullRules() {
-        try {
-            String url = "https://raw.githubusercontent.com/gh0stkey/HaE/gh-pages/Rules.yml";
-            HttpRequest httpRequest = HttpRequest.httpRequestFromUrl(url);
-            HttpRequestResponse requestResponse = api.http().sendRequest(httpRequest, RequestOptions.requestOptions().withUpstreamTLSVerification());
-            String responseBody = requestResponse.response().bodyToString();
-            if (responseBody.contains("rules")) {
-                FileOutputStream fileOutputStream = new FileOutputStream(rulesFilePath);
-                fileOutputStream.write(responseBody.getBytes());
-                fileOutputStream.close();
-            }
-        } catch (Exception ignored) {
-            api.extension().unload();
-        }
-    }
 }

src/main/java/hae/utils/DataManager.java

@@ -0,0 +1,85 @@
+package hae.utils;
+
+import burp.api.montoya.MontoyaApi;
+import burp.api.montoya.http.message.HttpRequestResponse;
+import burp.api.montoya.http.message.requests.HttpRequest;
+import burp.api.montoya.http.message.responses.HttpResponse;
+import burp.api.montoya.persistence.PersistedList;
+import burp.api.montoya.persistence.PersistedObject;
+import burp.api.montoya.persistence.Persistence;
+import hae.component.board.message.MessageTableModel;
+import hae.instances.http.utils.RegularMatcher;
+
+public class DataManager {
+    private final MontoyaApi api;
+    private final Persistence persistence;
+
+    public DataManager(MontoyaApi api) {
+        this.api = api;
+        this.persistence = api.persistence();
+    }
+
+    private void saveIndex(String indexName, String indexValue) {
+        PersistedList<String> indexList = persistence.extensionData().getStringList(indexName);
+
+        if (indexList != null && !indexList.isEmpty()) {
+            persistence.extensionData().deleteStringList(indexName);
+        } else {
+            indexList = PersistedList.persistedStringList();
+        }
+
+        if (!indexList.contains(indexValue)) {
+            indexList.add(indexValue);
+        }
+
+        persistence.extensionData().setStringList(indexName, indexList);
+    }
+
+    public void putData(String dataType, String dataName, PersistedObject persistedObject) {
+        if (persistence.extensionData().getChildObject(dataName) != null) {
+            persistence.extensionData().deleteChildObject(dataName);
+        }
+        persistence.extensionData().setChildObject(dataName, persistedObject);
+        saveIndex(dataType, dataName);
+    }
+
+    public void loadData(MessageTableModel messageTableModel) {
+        // 1. 获取索引
+        PersistedList<String> dataIndex = persistence.extensionData().getStringList("data"); // 数据索引
+        PersistedList<String> messageIndex = persistence.extensionData().getStringList("message"); // 消息索引
+
+        // 2. 从索引获取数据
+        loadHaEData(dataIndex);
+        loadMessageData(messageIndex, messageTableModel);
+
+    }
+
+    private void loadHaEData(PersistedList<String> dataIndex) {
+        if (dataIndex != null && !dataIndex.isEmpty()) {
+            dataIndex.parallelStream().forEach(index -> {
+                PersistedObject dataObj = persistence.extensionData().getChildObject(index);
+                dataObj.stringListKeys().forEach(dataKey -> {
+                    RegularMatcher.putDataToGlobalMap(api, index, dataKey, dataObj.getStringList(dataKey).stream().toList(), false);
+                });
+            });
+        }
+    }
+
+    private void loadMessageData(PersistedList<String> messageIndex, MessageTableModel messageTableModel) {
+        if (messageIndex != null && !messageIndex.isEmpty()) {
+            messageIndex.parallelStream().forEach(index -> {
+                PersistedObject dataObj = persistence.extensionData().getChildObject(index);
+                HttpRequestResponse messageInfo = dataObj.getHttpRequestResponse("messageInfo");
+                String comment = dataObj.getString("comment");
+                String color = dataObj.getString("color");
+                HttpRequest request = messageInfo.request();
+                HttpResponse response = messageInfo.response();
+                String method = request.method();
+                String url = request.url();
+                String status = String.valueOf(response.statusCode());
+                String length = String.valueOf(response.toByteArray().length());
+                messageTableModel.add(messageInfo, url, method, status, length, comment, color, false);
+            });
+        }
+    }
+}

src/main/java/hae/utils/UIEnhancer.java

@@ -7,24 +7,38 @@ import java.awt.event.FocusListener;
 
 public class UIEnhancer {
     public static void setTextFieldPlaceholder(JTextField textField, String placeholderText) {
-        textField.setForeground(Color.GRAY);
-        textField.setText(placeholderText);
+        // 使用客户端属性来存储占位符文本和占位符状态
+        textField.putClientProperty("placeholderText", placeholderText);
+        textField.putClientProperty("isPlaceholder", true);
+
+        // 设置占位符文本和颜色
+        setPlaceholderText(textField);
+
         textField.addFocusListener(new FocusListener() {
             @Override
             public void focusGained(FocusEvent e) {
-                if (textField.getText().equals(placeholderText)) {
+                // 当获得焦点且文本是占位符时，清除文本并更改颜色
+                if ((boolean) textField.getClientProperty("isPlaceholder")) {
                     textField.setText("");
                     textField.setForeground(Color.BLACK);
+                    textField.putClientProperty("isPlaceholder", false);
                 }
             }
 
             @Override
             public void focusLost(FocusEvent e) {
+                // 当失去焦点且文本为空时，设置占位符文本和颜色
                 if (textField.getText().isEmpty()) {
-                    textField.setForeground(Color.GRAY);
-                    textField.setText(placeholderText);
+                    setPlaceholderText(textField);
                 }
             }
         });
     }
+
+    private static void setPlaceholderText(JTextField textField) {
+        String placeholderText = (String) textField.getClientProperty("placeholderText");
+        textField.setForeground(Color.GRAY);
+        textField.setText(placeholderText);
+        textField.putClientProperty("isPlaceholder", true);
+    }
 }

src/main/java/hae/utils/http/HttpUtils.java

@@ -3,9 +3,7 @@ package hae.utils.http;
 import burp.api.montoya.MontoyaApi;
 import burp.api.montoya.http.message.HttpRequestResponse;
 import burp.api.montoya.http.message.requests.HttpRequest;
-import burp.api.montoya.http.message.requests.HttpTransformation;
 import burp.api.montoya.http.message.responses.HttpResponse;
-import burp.api.montoya.utilities.RandomUtils;
 import hae.utils.ConfigLoader;
 import hae.utils.string.StringProcessor;
 
@@ -21,25 +19,6 @@ public class HttpUtils {
         this.configLoader = configLoader;
     }
 
-    public HttpRequest generateRequestByMultipartUploadMethod(String url, String name, String filename, String content) {
-        HttpRequest baseRequest = HttpRequest.httpRequestFromUrl(url).withTransformationApplied(HttpTransformation.TOGGLE_METHOD);
-
-        String boundary = api.utilities().randomUtils().randomString(32, RandomUtils.CharacterSet.ASCII_LETTERS);
-
-        String newBody = String.format("--%s\r\nContent-Disposition: form-data; name=\"%s\"; filename=\"%s\"\r\n\r\n%s\r\n", boundary, name, filename, content) +
-                String.format("--%s\r\nContent-Disposition: form-data; name=\"%s\"\r\n\r\n%s\r\n", boundary, "purpose", "file-extract") +
-                "--" + boundary + "--\r\n";
-
-        baseRequest = baseRequest.withUpdatedHeader("Content-Type", "multipart/form-data; boundary=" + boundary).withBody(newBody);
-
-        return baseRequest;
-    }
-
-
-    public HttpRequest generateRequestByDeleteMethod(String url) {
-        return HttpRequest.httpRequestFromUrl(url).withMethod("DELETE");
-    }
-
     public boolean verifyHttpRequestResponse(HttpRequestResponse requestResponse, String toolType) {
         HttpRequest request = requestResponse.request();
         HttpResponse response = requestResponse.response();

src/main/java/hae/utils/project/FileProcessor.java

@@ -1,47 +0,0 @@
-package hae.utils.project;
-
-import java.io.File;
-import java.nio.file.DirectoryStream;
-import java.nio.file.Files;
-import java.nio.file.Path;
-import java.nio.file.Paths;
-import java.util.Comparator;
-
-public class FileProcessor {
-    public static void deleteDirectoryWithContents(Path pathToBeDeleted) {
-        if (pathToBeDeleted != null) {
-            try {
-                Files.walk(pathToBeDeleted)
-                        .sorted(Comparator.reverseOrder())
-                        .map(Path::toFile)
-                        .forEach(File::delete);
-            } catch (Exception ignored) {
-            }
-        }
-    }
-
-    public static byte[] readFileContent(String basePath, String fileName) {
-        Path filePath = Paths.get(basePath, fileName);
-        Path path = Paths.get(basePath);
-        try {
-            byte[] fileContent = Files.readAllBytes(filePath);
-
-            Files.deleteIfExists(filePath);
-
-            boolean isEmpty = isDirectoryEmpty(path);
-            if (isEmpty) {
-                Files.deleteIfExists(path);
-            }
-
-            return fileContent;
-        } catch (Exception e) {
-            return new byte[0];
-        }
-    }
-
-    private static boolean isDirectoryEmpty(Path directory) throws Exception {
-        try (DirectoryStream<Path> dirStream = Files.newDirectoryStream(directory)) {
-            return !dirStream.iterator().hasNext();
-        }
-    }
-}

src/main/java/hae/utils/project/ProjectProcessor.java

@@ -1,187 +0,0 @@
-package hae.utils.project;
-
-import burp.api.montoya.MontoyaApi;
-import hae.utils.project.model.HaeFileContent;
-import org.yaml.snakeyaml.LoaderOptions;
-import org.yaml.snakeyaml.Yaml;
-
-import java.io.*;
-import java.nio.charset.StandardCharsets;
-import java.nio.file.Files;
-import java.nio.file.Path;
-import java.nio.file.StandardCopyOption;
-import java.util.*;
-import java.util.concurrent.Callable;
-import java.util.concurrent.ExecutorService;
-import java.util.concurrent.Executors;
-import java.util.zip.ZipEntry;
-import java.util.zip.ZipFile;
-import java.util.zip.ZipOutputStream;
-
-public class ProjectProcessor {
-    private final MontoyaApi api;
-
-    public ProjectProcessor(MontoyaApi api) {
-        this.api = api;
-    }
-
-    public boolean createHaeFile(String haeFilePath, String host, Map<String, List<String>> dataMap, Map<String, Map<String, Object>> urlMap, Map<String, Map<String, Object>> httpMap) {
-        ExecutorService executor = Executors.newFixedThreadPool(Runtime.getRuntime().availableProcessors() * 2);
-
-        List<Callable<Void>> tasks = new ArrayList<>();
-
-        ByteArrayOutputStream dataYamlStream = new ByteArrayOutputStream();
-        ByteArrayOutputStream urlYamlStream = new ByteArrayOutputStream();
-        Yaml yaml = new Yaml();
-
-        yaml.dump(dataMap, new OutputStreamWriter(dataYamlStream, StandardCharsets.UTF_8));
-        yaml.dump(urlMap, new OutputStreamWriter(urlYamlStream, StandardCharsets.UTF_8));
-
-        try (ZipOutputStream zipOut = new ZipOutputStream(new FileOutputStream(haeFilePath))) {
-            zipOut.putNextEntry(new ZipEntry("info"));
-            zipOut.write(host.getBytes(StandardCharsets.UTF_8));
-            zipOut.closeEntry();
-
-            zipOut.putNextEntry(new ZipEntry("data"));
-            zipOut.write(dataYamlStream.toByteArray());
-            zipOut.closeEntry();
-
-            zipOut.putNextEntry(new ZipEntry("url"));
-            zipOut.write(urlYamlStream.toByteArray());
-            zipOut.closeEntry();
-
-            for (String httpHash : httpMap.keySet()) {
-                Map<String, Object> httpItem = httpMap.get(httpHash);
-                tasks.add(() -> {
-                    try {
-                        ByteArrayOutputStream httpOutStream = new ByteArrayOutputStream();
-                        byte[] request = (byte[]) httpItem.get("request");
-                        byte[] response = (byte[]) httpItem.get("response");
-
-                        httpOutStream.write(response);
-                        httpOutStream.write(request);
-
-                        synchronized (zipOut) {
-                            zipOut.putNextEntry(new ZipEntry(String.format("http/%s", httpHash)));
-                            zipOut.write(httpOutStream.toByteArray());
-                            zipOut.closeEntry();
-                        }
-                    } catch (Exception e) {
-                        api.logging().logToError("createHaeFile: " + e.getMessage());
-                    }
-
-                    return null;
-                });
-            }
-
-            executor.invokeAll(tasks);
-        } catch (Exception e) {
-            api.logging().logToError("createHaeFile: " + e.getMessage());
-            return false;
-        } finally {
-            executor.shutdown();
-        }
-
-        return true;
-    }
-
-    public HaeFileContent readHaeFile(String haeFilePath) {
-        ExecutorService executor = Executors.newFixedThreadPool(Runtime.getRuntime().availableProcessors() * 2);
-        List<Callable<Void>> tasks = new ArrayList<>();
-
-        HaeFileContent haeFileContent = new HaeFileContent(api);
-        LoaderOptions loaderOptions = new LoaderOptions();
-        loaderOptions.setMaxAliasesForCollections(Integer.MAX_VALUE);
-        loaderOptions.setCodePointLimit(Integer.MAX_VALUE);
-        Yaml yaml = new Yaml(loaderOptions);
-        Path tempDirectory = null;
-
-        try {
-            if (hasValidStructure(haeFilePath)) {
-                tempDirectory = Files.createTempDirectory("hae");
-                haeFileContent.setHttpPath(tempDirectory.toString());
-
-                try (ZipFile zipFile = new ZipFile(haeFilePath)) {
-                    Enumeration<? extends ZipEntry> entries = zipFile.entries();
-                    while (entries.hasMoreElements()) {
-                        ZipEntry entry = entries.nextElement();
-                        String fileName = entry.getName();
-                        if (fileName.startsWith("http/")) {
-                            Path filePath = tempDirectory.resolve(fileName.substring("http/".length()));
-
-                            tasks.add(() -> {
-                                try (InputStream in = zipFile.getInputStream(entry)) {
-                                    Files.copy(in, filePath, StandardCopyOption.REPLACE_EXISTING);
-                                } catch (IOException e) {
-                                    api.logging().logToError("readHaeFile: " + e.getMessage());
-                                }
-
-                                return null;
-                            });
-                        } else {
-                            try (InputStream in = zipFile.getInputStream(entry)) {
-                                switch (fileName) {
-                                    case "info" ->
-                                            haeFileContent.setHost(new String(in.readAllBytes(), StandardCharsets.UTF_8));
-                                    case "data" ->
-                                            haeFileContent.setDataMap(yaml.load(new InputStreamReader(in, StandardCharsets.UTF_8)));
-                                    case "url" ->
-                                            haeFileContent.setUrlMap(yaml.load(new InputStreamReader(in, StandardCharsets.UTF_8)));
-                                }
-                            }
-                        }
-                    }
-
-                    executor.invokeAll(tasks);
-                }
-            }
-        } catch (Exception e) {
-            api.logging().logToError("readHaeFile: " + e.getMessage());
-            if (tempDirectory != null) {
-                FileProcessor.deleteDirectoryWithContents(tempDirectory);
-            }
-            haeFileContent = null;
-        } finally {
-            executor.shutdown();
-        }
-
-        return haeFileContent;
-    }
-
-    private boolean hasValidStructure(String zipFilePath) {
-        Set<String> requiredRootEntries = new HashSet<>();
-        requiredRootEntries.add("info");
-        requiredRootEntries.add("data");
-        requiredRootEntries.add("url");
-
-        boolean hasHttpDirectoryWithFiles = false;
-
-        try {
-            ZipFile zipFile = new ZipFile(zipFilePath);
-            Enumeration<? extends ZipEntry> entries = zipFile.entries();
-
-            while (entries.hasMoreElements()) {
-                ZipEntry entry = entries.nextElement();
-                String name = entry.getName();
-
-                if (!entry.isDirectory() && !name.contains("/")) {
-                    requiredRootEntries.remove(name);
-                }
-
-                if (name.startsWith("http/") && !entry.isDirectory()) {
-                    hasHttpDirectoryWithFiles = true;
-                }
-
-                if (requiredRootEntries.isEmpty() && hasHttpDirectoryWithFiles) {
-                    break;
-                }
-            }
-
-            zipFile.close();
-        } catch (Exception ignored) {
-        }
-
-        return requiredRootEntries.isEmpty() && hasHttpDirectoryWithFiles;
-    }
-}
-

src/main/java/hae/utils/project/model/HaeFileContent.java

@@ -1,76 +0,0 @@
-package hae.utils.project.model;
-
-import burp.api.montoya.MontoyaApi;
-
-import java.nio.charset.StandardCharsets;
-import java.util.ArrayList;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-
-public class HaeFileContent {
-    private final MontoyaApi api;
-    private String host;
-    private String httpPath;
-    private final Map<String, List<String>> dataMap;
-    private final Map<String, Map<String, String>> urlMap;
-
-    public HaeFileContent(MontoyaApi api) {
-        this.api = api;
-        this.dataMap = new HashMap<>();
-        this.urlMap = new HashMap<>();
-    }
-
-    public String getHost() {
-        return host;
-    }
-
-    public Map<String, List<String>> getDataMap() {
-        return dataMap;
-    }
-
-    public Map<String, Map<String, String>> getUrlMap() {
-        return urlMap;
-    }
-
-    public String getHttpPath() {
-        return httpPath;
-    }
-
-    public void setHost(String host) {
-        this.host = host;
-    }
-
-    public void setHttpPath(String path) {
-        this.httpPath = path;
-    }
-
-    public void setDataMap(Map<String, List<Object>> dataMap) {
-        for (Map.Entry<String, List<Object>> entry : dataMap.entrySet()) {
-            List<String> values = new ArrayList<>();
-            for (Object value : entry.getValue()) {
-                try {
-                    values.add(new String((byte[]) value, StandardCharsets.UTF_8));
-                } catch (Exception e) {
-                    values.add(value.toString());
-                }
-            }
-            this.dataMap.put(entry.getKey(), values);
-        }
-    }
-
-    public void setUrlMap(Map<String, Map<String, Object>> urlMap) {
-        for (Map.Entry<String, Map<String, Object>> entry : urlMap.entrySet()) {
-            Map<String, String> newValues = new HashMap<>();
-            Map<String, Object> values = entry.getValue();
-            for (String key : values.keySet()) {
-                try {
-                    newValues.put(key, new String((byte[]) values.get(key), StandardCharsets.UTF_8));
-                } catch (Exception e) {
-                    newValues.put(key, values.get(key).toString());
-                }
-            }
-            this.urlMap.put(entry.getKey(), newValues);
-        }
-    }
-}

src/main/resources/rules/Rules.yml

@@ -1,284 +1,303 @@
 rules:
-- group: Fingerprint
-  rule:
-  - name: Shiro
-    loaded: true
-    f_regex: (=deleteMe|rememberMe=)
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: any header
-    engine: dfa
-    sensitive: true
-  - name: JSON Web Token
-    loaded: true
-    f_regex: (eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,}|eyJ[A-Za-z0-9_\/+-]{10,}\.[A-Za-z0-9._\/+-]{10,})
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: any
-    engine: nfa
-    sensitive: true
-  - name: Swagger UI
-    loaded: true
-    f_regex: ((swagger-ui.html)|(\"swagger\":)|(Swagger UI)|(swaggerUi)|(swaggerVersion))
-    s_regex: ''
-    format: '{0}'
-    color: red
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: Ueditor
-    loaded: true
-    f_regex: (ueditor\.(config|all)\.js)
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: Druid
-    loaded: true
-    f_regex: (Druid Stat Index)
-    s_regex: ''
-    format: '{0}'
-    color: orange
-    scope: response body
-    engine: dfa
-    sensitive: false
-- group: Maybe Vulnerability
-  rule:
-  - name: Java Deserialization
-    loaded: true
-    f_regex: (javax\.faces\.ViewState)
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: Debug Logic Parameters
-    loaded: true
-    f_regex: ((access=)|(adm=)|(admin=)|(alter=)|(cfg=)|(clone=)|(config=)|(create=)|(dbg=)|(debug=)|(delete=)|(disable=)|(edit=)|(enable=)|(exec=)|(execute=)|(grant=)|(load=)|(make=)|(modify=)|(rename=)|(reset=)|(root=)|(shell=)|(test=)|(toggl=))
-    s_regex: ''
-    format: '{0}'
-    color: cyan
-    scope: request
-    engine: dfa
-    sensitive: false
-  - name: URL As A Value
-    loaded: true
-    f_regex: (=(https?)(://|%3a%2f%2f))
-    s_regex: ''
-    format: '{0}'
-    color: cyan
-    scope: any
-    engine: nfa
-    sensitive: false
-  - name: Upload Form
-    loaded: true
-    f_regex: (type\=\"file\")
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: DoS Paramters
-    loaded: true
-    f_regex: ((size=)|(page=)|(num=)|(limit=)|(start=)|(end=)|(count=))
-    s_regex: ''
-    format: '{0}'
-    color: cyan
-    scope: request
-    engine: dfa
-    sensitive: false
-- group: Basic Information
-  rule:
-  - name: Email
-    loaded: true
-    f_regex: (([a-z0-9]+[_|\.])*[a-z0-9]+@([a-z0-9]+[-|_|\.])*[a-z0-9]+\.((?!js|css|jpg|jpeg|png|ico)[a-z]{2,5}))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response
-    engine: nfa
-    sensitive: false
-  - name: Chinese IDCard
-    loaded: true
-    f_regex: '[^0-9]((\d{8}(0\d|10|11|12)([0-2]\d|30|31)\d{3}$)|(\d{6}(18|19|20)\d{2}(0[1-9]|10|11|12)([0-2]\d|30|31)\d{3}(\d|X|x)))[^0-9]'
-    s_regex: ''
-    format: '{0}'
-    color: orange
-    scope: response body
-    engine: nfa
-    sensitive: true
-  - name: Chinese Mobile Number
-    loaded: true
-    f_regex: '[^\w]((?:(?:\+|00)86)?1(?:(?:3[\d])|(?:4[5-79])|(?:5[0-35-9])|(?:6[5-7])|(?:7[0-8])|(?:8[\d])|(?:9[189]))\d{8})[^\w]'
-    s_regex: ''
-    format: '{0}'
-    color: orange
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: Internal IP Address
-    loaded: true
-    f_regex: '[^0-9]((127\.0\.0\.1)|(10\.\d{1,3}\.\d{1,3}\.\d{1,3})|(172\.((1[6-9])|(2\d)|(3[01]))\.\d{1,3}\.\d{1,3})|(192\.168\.\d{1,3}\.\d{1,3}))'
-    s_regex: ''
-    format: '{0}'
-    color: cyan
-    scope: response
-    engine: nfa
-    sensitive: true
-  - name: MAC Address
-    loaded: true
-    f_regex: (^([a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5})|[^a-zA-Z0-9]([a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5}))
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: response
-    engine: nfa
-    sensitive: true
-- group: Sensitive Information
-  rule:
-  - name: Cloud Key
-    loaded: true
-    f_regex: (((access)(|-|_)(key)(|-|_)(id|secret))|(LTAI[a-z0-9]{12,20}))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: any
-    engine: nfa
-    sensitive: false
-  - name: Windows File/Dir Path
-    loaded: true
-    f_regex: '[^\w](([a-zA-Z]:\\(?:\w+\\?)*)|([a-zA-Z]:\\(?:\w+\\)*\w+\.\w+))'
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: response
-    engine: nfa
-    sensitive: true
-  - name: Password Field
-    loaded: true
-    f_regex: ((|'|")(|[\w]{1,10})([p](ass|wd|asswd|assword))(|[\w]{1,10})(|'|")(:|=)(
-      |)('|")(.*?)('|")(|,))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: Username Field
-    loaded: true
-    f_regex: ((|'|")(|[\w]{1,10})(([u](ser|name|sername))|(account)|((((create|update)((d|r)|(by|on|at)))|(creator))))(|[\w]{1,10})(|'|")(:|=)(
-      |)('|")(.*?)('|")(|,))
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: WeCom Key
-    loaded: true
-    f_regex: ((corp)(id|secret))
-    s_regex: ''
-    format: '{0}'
-    color: green
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: JDBC Connection
-    loaded: true
-    f_regex: (jdbc:[a-z:]+://[a-z0-9\.\-_:;=/@?,&]+)
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: any
-    engine: nfa
-    sensitive: false
-  - name: Authorization Header
-    loaded: true
-    f_regex: ((basic [a-z0-9=:_\+\/-]{5,100})|(bearer [a-z0-9_.=:_\+\/-]{5,100}))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: Sensitive Field
-    loaded: true
-    f_regex: ((\[)?('|")?([\w]{0,10})((key)|(secret)|(token)|(config)|(auth)|(access)|(admin)|(ticket))([\w]{0,10})('|")?(\])?(
-      |)(:|=)( |)('|")(.*?)('|")(|,))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response
-    engine: nfa
-    sensitive: false
-- group: Other
-  rule:
-  - name: Linkfinder
-    loaded: true
-    f_regex: (?:"|')(((?:[a-zA-Z]{1,10}://|//)[^"'/]{1,}\.[a-zA-Z]{2,}[^"']{0,})|((?:/|\.\./|\./)[^"'><,;|*()(%%$^/\\\[\]][^"'><,;|()]{1,})|([a-zA-Z0-9_\-/]{1,}/[a-zA-Z0-9_\-/]{1,}\.(?:[a-zA-Z]{1,4}|action)(?:[\?|#][^"|']{0,}|))|([a-zA-Z0-9_\-/]{1,}/[a-zA-Z0-9_\-/]{3,}(?:[\?|#][^"|']{0,}|))|([a-zA-Z0-9_\-]{1,}\.(?:\w)(?:[\?|#][^"|']{0,}|)))(?:"|')
-    s_regex: ''
-    format: '{0}'
-    color: gray
-    scope: response body
-    engine: nfa
-    sensitive: true
-  - name: Source Map
-    loaded: true
-    f_regex: (\.js\.map)
-    s_regex: ''
-    format: '{0}'
-    color: pink
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: Create Script
-    loaded: true
-    f_regex: (\{[^{}]*\}\s*\[[^\s]*\]\s*\+\s*"[^\s]*\.js")
-    s_regex: '"?([\w].*?)"?:"(.*?)"'
-    format: '{0}.{1}'
-    color: green
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: URL Schemes
-    loaded: true
-    f_regex: ((?![http]|[https])(([-A-Za-z0-9]{1,20})://[-A-Za-z0-9+&@#/%?=~_|!:,.;]+[-A-Za-z0-9+&@#/%=~_|]))
-    s_regex: ''
-    format: '{0}'
-    color: yellow
-    scope: response body
-    engine: nfa
-    sensitive: false
-  - name: Router Push
-    loaded: true
-    f_regex: (\$router\.push)
-    s_regex: ''
-    format: '{0}'
-    color: magenta
-    scope: response body
-    engine: dfa
-    sensitive: false
-  - name: All URL
-    loaded: true
-    f_regex: (https?://[-A-Za-z0-9+&@#/%?=~_|!:,.;\u4E00-\u9FFF]+[-A-Za-z0-9+&@#/%=~_|])
-    s_regex: ''
-    format: '{0}'
-    color: gray
-    scope: response body
-    engine: nfa
-    sensitive: true
-  - name: Request URI
-    loaded: true
-    f_regex: ' ((?!.*\.js(\?.*)?$)(.*?[^.js$])) '
-    s_regex: ''
-    format: '{0}'
-    color: gray
-    scope: request line
-    engine: nfa
-    sensitive: false
+  - group: Fingerprint
+    rule:
+      - name: Shiro
+        loaded: true
+        f_regex: (=deleteMe|rememberMe=)
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: any header
+        engine: dfa
+        sensitive: true
+      - name: JSON Web Token
+        loaded: true
+        f_regex: (eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,}|eyJ[A-Za-z0-9_\/+-]{10,}\.[A-Za-z0-9._\/+-]{10,})
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: any
+        engine: nfa
+        sensitive: true
+      - name: Swagger UI
+        loaded: true
+        f_regex: ((swagger-ui.html)|(\"swagger\":)|(Swagger UI)|(swaggerUi)|(swaggerVersion))
+        s_regex: ''
+        format: '{0}'
+        color: red
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: Ueditor
+        loaded: true
+        f_regex: (ueditor\.(config|all)\.js)
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: Druid
+        loaded: true
+        f_regex: (Druid Stat Index)
+        s_regex: ''
+        format: '{0}'
+        color: orange
+        scope: response body
+        engine: dfa
+        sensitive: false
+  - group: Maybe Vulnerability
+    rule:
+      - name: Java Deserialization
+        loaded: true
+        f_regex: (javax\.faces\.ViewState)
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: Debug Logic Parameters
+        loaded: true
+        f_regex: ((access=)|(adm=)|(admin=)|(alter=)|(cfg=)|(clone=)|(config=)|(create=)|(dbg=)|(debug=)|(delete=)|(disable=)|(edit=)|(enable=)|(exec=)|(execute=)|(grant=)|(load=)|(make=)|(modify=)|(rename=)|(reset=)|(root=)|(shell=)|(test=)|(toggl=))
+        s_regex: ''
+        format: '{0}'
+        color: cyan
+        scope: request
+        engine: dfa
+        sensitive: false
+      - name: URL As A Value
+        loaded: true
+        f_regex: (=(https?)(://|%3a%2f%2f))
+        s_regex: ''
+        format: '{0}'
+        color: cyan
+        scope: any
+        engine: nfa
+        sensitive: false
+      - name: Upload Form
+        loaded: true
+        f_regex: (type\=\"file\")
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: DoS Paramters
+        loaded: true
+        f_regex: ((size=)|(page=)|(num=)|(limit=)|(start=)|(end=)|(count=))
+        s_regex: ''
+        format: '{0}'
+        color: cyan
+        scope: request
+        engine: dfa
+        sensitive: false
+  - group: Basic Information
+    rule:
+      - name: Email
+        loaded: true
+        f_regex: (([a-z0-9]+[_|\.])*[a-z0-9]+@([a-z0-9]+[-|_|\.])*[a-z0-9]+\.((?!js|css|jpg|jpeg|png|ico)[a-z]{2,5}))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response
+        engine: nfa
+        sensitive: false
+      - name: Chinese IDCard
+        loaded: true
+        f_regex: '[^0-9]((\d{8}(0\d|10|11|12)([0-2]\d|30|31)\d{3}$)|(\d{6}(18|19|20)\d{2}(0[1-9]|10|11|12)([0-2]\d|30|31)\d{3}(\d|X|x)))[^0-9]'
+        s_regex: ''
+        format: '{0}'
+        color: orange
+        scope: response body
+        engine: nfa
+        sensitive: true
+      - name: Chinese Mobile Number
+        loaded: true
+        f_regex: '[^\w]((?:(?:\+|0{0,2})86)?1(?:(?:3[\d])|(?:4[5-79])|(?:5[0-35-9])|(?:6[5-7])|(?:7[0-8])|(?:8[\d])|(?:9[189]))\d{8})[^\w]'
+        s_regex: ''
+        format: '{0}'
+        color: orange
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: Internal IP Address
+        loaded: true
+        f_regex: '[^0-9]((127\.0\.0\.1)|(10\.\d{1,3}\.\d{1,3}\.\d{1,3})|(172\.((1[6-9])|(2\d)|(3[01]))\.\d{1,3}\.\d{1,3})|(192\.168\.\d{1,3}\.\d{1,3}))'
+        s_regex: ''
+        format: '{0}'
+        color: cyan
+        scope: response
+        engine: nfa
+        sensitive: true
+      - name: MAC Address
+        loaded: true
+        f_regex: (^([a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5})|[^a-zA-Z0-9]([a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5}))
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response
+        engine: nfa
+        sensitive: true
+  - group: Sensitive Information
+    rule:
+      - name: Cloud Key
+        loaded: true
+        f_regex: (((access)(|-|_)(key)(|-|_)(id|secret))|(LTAI[a-z0-9]{12,20}))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: any
+        engine: nfa
+        sensitive: false
+      - name: Windows File/Dir Path
+        loaded: true
+        f_regex: '[^\w]([a-zA-Z]:\\\\?(?:[^<>:/\\|?*]+\\\\?)*)([^<>:/\\|?*]+(?:\.[^<>:/\\|?*]+)?)'
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response
+        engine: nfa
+        sensitive: true
+      - name: Password Field
+        loaded: true
+        f_regex: ((|\\)(|'|")(|[\w]{1,10})([p](ass|wd|asswd|assword))(|[\w]{1,10})(|\\)(|'|")(:|=|\)\.val\()(
+          |)(|\\)('|")([^'"]+?)(|\\)('|")(|,|\)))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: Username Field
+        loaded: true
+        f_regex: ((|\\)(|'|")(|[\w]{1,10})(([u](ser|name|sername))|(account)|((((create|update)((d|r)|(by|on|at)))|(creator))))(|[\w]{1,10})(|\\)(|'|")(:|=|\)\.val\()(
+          |)(|\\)('|")([^'"]+?)(|\\)('|")(|,|\)))
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: WeCom Key
+        loaded: true
+        f_regex: ((corp)(id|secret))
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: JDBC Connection
+        loaded: true
+        f_regex: (jdbc:[a-z:]+://[a-z0-9\.\-_:;=/@?,&]+)
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: any
+        engine: nfa
+        sensitive: false
+      - name: Authorization Header
+        loaded: true
+        f_regex: ((basic [a-z0-9=:_\+\/-]{5,100})|(bearer [a-z0-9_.=:_\+\/-]{5,100}))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: Sensitive Field
+        loaded: true
+        f_regex: ((\[)?('|")?([\w]{0,10})((key)|(secret)|(token)|(config)|(auth)|(access)|(admin)|(ticket))([\w]{0,10})('|")?(\])?(
+          |)(:|=|\)\.val\()( |)('|")([^'"]+?)('|")(|,|\)))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response
+        engine: nfa
+        sensitive: false
+      - name: Mobile Number Field
+        loaded: true
+        f_regex: ((|\\)(|'|")(|[\w]{1,10})(mobile|phone|sjh|shoujihao|concat)(|[\w]{1,10})(|\\)(|'|")(:|=|\)\.val\()(
+          |)(|\\)('|")([^'"]+?)(|\\)('|")(|,|\)))
+        s_regex: ''
+        format: '{0}'
+        color: green
+        scope: response body
+        engine: nfa
+        sensitive: false
+  - group: Other
+    rule:
+      - name: Linkfinder
+        loaded: true
+        f_regex: (?:"|')(((?:[a-zA-Z]{1,10}://|//)[^"'/]{1,}\.[a-zA-Z]{2,}[^"']{0,})|((?:/|\.\./|\./)[^"'><,;|*()(%%$^/\\\[\]][^"'><,;|()]{1,})|([a-zA-Z0-9_\-/]{1,}/[a-zA-Z0-9_\-/]{1,}\.(?:[a-zA-Z]{1,4}|action)(?:[\?|#][^"|']{0,}|))|([a-zA-Z0-9_\-/]{1,}/[a-zA-Z0-9_\-/]{3,}(?:[\?|#][^"|']{0,}|))|([a-zA-Z0-9_\-]{1,}\.(?:\w)(?:[\?|#][^"|']{0,}|)))(?:"|')
+        s_regex: ''
+        format: '{0}'
+        color: gray
+        scope: response body
+        engine: nfa
+        sensitive: true
+      - name: Source Map
+        loaded: true
+        f_regex: (\.js\.map)
+        s_regex: ''
+        format: '{0}'
+        color: pink
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: Create Script
+        loaded: true
+        f_regex: (\{[^{}]*\}\s*\[[^\s]*\]\s*\+\s*"[^\s]*\.js")
+        s_regex: '"?([\w].*?)"?:"(.*?)"'
+        format: '{0}.{1}'
+        color: green
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: URL Schemes
+        loaded: true
+        f_regex: (\b(?![\w]{0,10}?https?://)(([-A-Za-z0-9]{1,20})://[-A-Za-z0-9+&@#/%?=~_|!:,.;]+[-A-Za-z0-9+&@#/%=~_|]))
+        s_regex: ''
+        format: '{0}'
+        color: yellow
+        scope: response body
+        engine: nfa
+        sensitive: false
+      - name: Router Push
+        loaded: true
+        f_regex: (\$router\.push)
+        s_regex: ''
+        format: '{0}'
+        color: magenta
+        scope: response body
+        engine: dfa
+        sensitive: false
+      - name: All URL
+        loaded: true
+        f_regex: (https?://[-A-Za-z0-9+&@#/%?=~_|!:,.;\u4E00-\u9FFF]+[-A-Za-z0-9+&@#/%=~_|])
+        s_regex: ''
+        format: '{0}'
+        color: gray
+        scope: response body
+        engine: nfa
+        sensitive: true
+      - name: Request URI
+        loaded: true
+        f_regex: ' ((?!.*\.js(\?.*)?$)(.*?[^.js$])) '
+        s_regex: ''
+        format: '{0}'
+        color: gray
+        scope: request line
+        engine: nfa
+        sensitive: false
+      - name: 302 Location
+        loaded: true
+        f_regex: 'Location: (.*?)\n'
+        s_regex: ''
+        format: '{0}'
+        color: gray
+        scope: response header
+        engine: nfa
+        sensitive: false