426 lines
13 KiB
Java
426 lines
13 KiB
Java
package burp;
|
||
|
||
import java.awt.BorderLayout;
|
||
import java.awt.Color;
|
||
import java.awt.Component;
|
||
import java.util.*;
|
||
|
||
import org.json.*;
|
||
|
||
import burp.action.DoAction;
|
||
import burp.action.ExtractContent;
|
||
import burp.action.MatchHTTP;
|
||
import burp.color.GetColorKey;
|
||
import burp.color.UpgradeColor;
|
||
import burp.file.FileExists;
|
||
import burp.file.ReadFile;
|
||
import burp.file.RemoveContent;
|
||
import burp.file.WriteFile;
|
||
import burp.ui.FillTable;
|
||
|
||
import javax.swing.JFrame;
|
||
import javax.swing.JOptionPane;
|
||
import javax.swing.DefaultCellEditor;
|
||
import javax.swing.JScrollPane;
|
||
import javax.swing.JTable;
|
||
import javax.swing.JTextField;
|
||
import javax.swing.table.DefaultTableModel;
|
||
import javax.swing.JPanel;
|
||
import javax.swing.JButton;
|
||
import java.awt.event.ActionListener;
|
||
import java.io.File;
|
||
import java.awt.event.ActionEvent;
|
||
import javax.swing.JCheckBox;
|
||
import javax.swing.JComboBox;
|
||
import javax.swing.JFileChooser;
|
||
import javax.swing.border.EtchedBorder;
|
||
import javax.swing.border.TitledBorder;
|
||
import javax.swing.event.TableModelEvent;
|
||
import javax.swing.event.TableModelListener;
|
||
import javax.swing.SwingConstants;
|
||
import javax.swing.SwingUtilities;
|
||
import javax.swing.JLabel;
|
||
|
||
import java.io.PrintWriter;
|
||
import java.io.UnsupportedEncodingException;
|
||
|
||
public class BurpExtender implements IBurpExtender, IHttpListener, IMessageEditorTabFactory, ITab {
|
||
|
||
private JFrame frame;
|
||
private JPanel panel;
|
||
private JTable table;
|
||
private JTextField textField;
|
||
private IBurpExtenderCallbacks callbacks;
|
||
private static IExtensionHelpers helpers;
|
||
private static String configFilePath = "config.json";
|
||
private static String initFilePath = "init.hae";
|
||
private static IMessageEditorTab HaETab;
|
||
private static PrintWriter stdout;
|
||
|
||
ReadFile rf = new ReadFile();
|
||
WriteFile wfc = new WriteFile();
|
||
FileExists fe = new FileExists();
|
||
RemoveContent rc = new RemoveContent();
|
||
GetColorKey gck = new GetColorKey();
|
||
UpgradeColor uc = new UpgradeColor();
|
||
ExtractContent ec = new ExtractContent();
|
||
MatchHTTP mh = new MatchHTTP();
|
||
FillTable ft = new FillTable();
|
||
DoAction da = new DoAction();
|
||
|
||
@Override
|
||
public void registerExtenderCallbacks(final IBurpExtenderCallbacks callbacks)
|
||
{
|
||
this.callbacks = callbacks;
|
||
this.helpers = callbacks.getHelpers();
|
||
// 设置插件名字和版本
|
||
String version = "1.5";
|
||
|
||
callbacks.setExtensionName(String.format("HaE (%s) - Highlighter and Extractor", version));
|
||
|
||
// 定义输出
|
||
stdout = new PrintWriter(callbacks.getStdout(), true);
|
||
stdout.println("@Author: EvilChen");
|
||
stdout.println("@Blog: cn.gh0st.cn");
|
||
|
||
// UI
|
||
SwingUtilities.invokeLater(new Runnable() {
|
||
@Override
|
||
public void run() {
|
||
// 判断"config.json"文件是否具备内容，如若不具备则进行初始化
|
||
if (configFilePath.equals("config.json")) {
|
||
if (rf.readFileContent(configFilePath).equals("")) {
|
||
wfc.writeFileContent(configFilePath, Config.initConfigContent);
|
||
wfc.writeFileContent(initFilePath, configFilePath);
|
||
}
|
||
}
|
||
// 判断配置文件是否存在
|
||
if (fe.fileExists(configFilePath)) {
|
||
configFilePath = rf.readFileContent(initFilePath);
|
||
} else {
|
||
JOptionPane.showMessageDialog(null, "Config File Not Found!", "Error", JOptionPane.ERROR_MESSAGE);
|
||
}
|
||
|
||
initialize();
|
||
ft.fillTable(configFilePath, table);
|
||
|
||
}
|
||
});
|
||
callbacks.registerHttpListener(BurpExtender.this);
|
||
callbacks.registerMessageEditorTabFactory(BurpExtender.this);
|
||
}
|
||
|
||
private void initialize() {
|
||
frame = new JFrame();
|
||
frame.setBounds(100, 100, 526, 403);
|
||
frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
|
||
|
||
panel = new JPanel();
|
||
frame.getContentPane().add(panel, BorderLayout.CENTER);
|
||
panel.setLayout(new BorderLayout(0, 0));
|
||
|
||
JPanel panel_3 = new JPanel();
|
||
panel.add(panel_3, BorderLayout.NORTH);
|
||
|
||
JLabel lblNewLabel_1 = new JLabel("Config File:");
|
||
panel_3.add(lblNewLabel_1);
|
||
|
||
textField = new JTextField();
|
||
textField.setEditable(false);
|
||
panel_3.add(textField);
|
||
textField.setColumns(20);
|
||
|
||
textField.setText(configFilePath);
|
||
|
||
JButton btnNewButton = new JButton("Select File ...");
|
||
btnNewButton.addActionListener(new ActionListener() {
|
||
public void actionPerformed(ActionEvent e) {
|
||
JFileChooser jfc = new JFileChooser();
|
||
jfc.setFileSelectionMode(JFileChooser.FILES_ONLY);
|
||
jfc.showDialog(new JLabel(), "Choose");
|
||
File file = jfc.getSelectedFile();
|
||
textField.setText(file.getAbsolutePath());
|
||
configFilePath = textField.getText();
|
||
wfc.writeFileContent(initFilePath, configFilePath);
|
||
ft.fillTable(configFilePath, table);
|
||
}
|
||
});
|
||
panel_3.add(btnNewButton);
|
||
|
||
JPanel panel_2 = new JPanel();
|
||
panel.add(panel_2, BorderLayout.CENTER);
|
||
panel_2.setLayout(new BorderLayout(0, 0));
|
||
|
||
JPanel panel_1 = new JPanel();
|
||
panel_2.add(panel_1, BorderLayout.NORTH);
|
||
panel_1.setBorder(new TitledBorder(new EtchedBorder(EtchedBorder.LOWERED, null, null), "Actions", TitledBorder.LEADING, TitledBorder.TOP, null, new Color(0, 0, 0)));
|
||
|
||
JButton btnReloadRule = new JButton("Reload");
|
||
btnReloadRule.addActionListener(new ActionListener() {
|
||
public void actionPerformed(ActionEvent e) {
|
||
ft.fillTable(configFilePath, table);
|
||
}
|
||
});
|
||
panel_1.add(btnReloadRule);
|
||
|
||
JButton btnNewRule = new JButton("New");
|
||
btnNewRule.addActionListener(new ActionListener() {
|
||
public void actionPerformed(ActionEvent arg0) {
|
||
DefaultTableModel dtm = (DefaultTableModel) table.getModel();
|
||
Vector rules = new Vector();
|
||
rules.add(true);
|
||
rules.add("New Rule");
|
||
rules.add("New Regex");
|
||
rules.add("red");
|
||
rules.add("response");
|
||
rules.add("any");
|
||
dtm.addRow(rules);
|
||
}
|
||
});
|
||
panel_1.add(btnNewRule);
|
||
|
||
JButton btnDeleteRule = new JButton("Delete");
|
||
btnDeleteRule.addActionListener(new ActionListener() {
|
||
public void actionPerformed(ActionEvent e) {
|
||
int selectRows = table.getSelectedRows().length;
|
||
DefaultTableModel dtm = (DefaultTableModel) table.getModel();
|
||
if (selectRows == 1) {
|
||
int selectedRowIndex = table.getSelectedRow();
|
||
// 在配置文件中删除数据
|
||
String cellValue = (String) dtm.getValueAt(selectedRowIndex, 1);
|
||
// System.out.println(cellValue);
|
||
rc.removeFileContent(cellValue, configFilePath);
|
||
// 在表格中删除数据
|
||
dtm.removeRow(selectedRowIndex);
|
||
|
||
}
|
||
}
|
||
});
|
||
panel_1.add(btnDeleteRule);
|
||
|
||
JScrollPane scrollPane = new JScrollPane();
|
||
panel_2.add(scrollPane, BorderLayout.CENTER);
|
||
|
||
table = new JTable();
|
||
table.setModel(new DefaultTableModel(
|
||
new Object[][] {
|
||
},
|
||
new String[] {
|
||
"Loaded", "Name", "Regex", "Color", "Scope", "Action"
|
||
}
|
||
));
|
||
scrollPane.setViewportView(table);
|
||
|
||
table.getColumnModel().getColumn(2).setPreferredWidth(172);
|
||
table.getColumnModel().getColumn(3).setCellEditor(new DefaultCellEditor(new JComboBox(Config.colorArray)));
|
||
table.getColumnModel().getColumn(0).setCellEditor(new DefaultCellEditor(new JCheckBox()));
|
||
table.getColumnModel().getColumn(4).setCellEditor(new DefaultCellEditor(new JComboBox(Config.scopeArray)));
|
||
table.getColumnModel().getColumn(5).setCellEditor(new DefaultCellEditor(new JComboBox(Config.actionArray)));
|
||
|
||
JLabel lblNewLabel = new JLabel("@EvilChen Love YuChen.");
|
||
lblNewLabel.setHorizontalAlignment(SwingConstants.CENTER);
|
||
panel.add(lblNewLabel, BorderLayout.SOUTH);
|
||
|
||
table.getModel().addTableModelListener(
|
||
new TableModelListener() {
|
||
@Override
|
||
public void tableChanged(TableModelEvent e) {
|
||
if (e.getType() == TableModelEvent.INSERT || e.getType() == TableModelEvent.UPDATE) {
|
||
DefaultTableModel dtm = (DefaultTableModel) table.getModel();
|
||
int rows = dtm.getRowCount();
|
||
JSONObject jsonObj = new JSONObject();
|
||
|
||
for (int i = 0; i < rows; i++) {
|
||
JSONObject jsonObj1 = new JSONObject();
|
||
jsonObj1.put("loaded", (boolean) dtm.getValueAt(i, 0));
|
||
jsonObj1.put("regex", (String) dtm.getValueAt(i, 2));
|
||
jsonObj1.put("color", (String) dtm.getValueAt(i, 3));
|
||
jsonObj1.put("scope", (String) dtm.getValueAt(i, 4));
|
||
jsonObj1.put("action", (String) dtm.getValueAt(i, 5));
|
||
// 添加数据
|
||
jsonObj.put((String) dtm.getValueAt(i, 1), jsonObj1);
|
||
}
|
||
|
||
wfc.writeFileContent(configFilePath, jsonObj.toString());
|
||
|
||
}
|
||
|
||
}
|
||
}
|
||
);
|
||
|
||
callbacks.customizeUiComponent(panel);
|
||
callbacks.customizeUiComponent(panel_1);
|
||
callbacks.customizeUiComponent(panel_2);
|
||
callbacks.customizeUiComponent(panel_3);
|
||
callbacks.customizeUiComponent(scrollPane);
|
||
callbacks.addSuiteTab(BurpExtender.this);
|
||
}
|
||
|
||
@Override
|
||
public IMessageEditorTab createNewInstance(IMessageEditorController controller, boolean editable) {
|
||
HaETab = new MarkInfoTab(controller, editable);
|
||
return HaETab;
|
||
}
|
||
|
||
@Override
|
||
public String getTabCaption() {
|
||
return "HaE";
|
||
}
|
||
|
||
@Override
|
||
public Component getUiComponent() {
|
||
return panel;
|
||
}
|
||
|
||
/*
|
||
* 使用processHttpMessage用来做Highlighter
|
||
*/
|
||
@Override
|
||
public void processHttpMessage(int toolFlag, boolean messageIsRequest, IHttpRequestResponse messageInfo) {
|
||
// 判断是否是响应，且该代码作用域为：REPEATER、INTRUDER、PROXY（分别对应toolFlag 64、32、4）
|
||
if (toolFlag == 64 || toolFlag == 32 || toolFlag == 4) {
|
||
JSONObject jsonObj = new JSONObject();
|
||
byte[] content = messageInfo.getRequest();
|
||
// 流量清洗
|
||
String urlString = helpers.analyzeRequest(messageInfo.getHttpService(), content).getUrl().toString();
|
||
urlString = urlString.indexOf("?") > 0 ? urlString.substring(0, urlString.indexOf("?")) : urlString;
|
||
// 正则判断
|
||
if (mh.matchSuffix(urlString)) {
|
||
return;
|
||
}
|
||
if (messageIsRequest) {
|
||
try {
|
||
String c = new String(content, "UTF-8").intern();
|
||
} catch (UnsupportedEncodingException e) {
|
||
e.printStackTrace();
|
||
}
|
||
jsonObj = ec.matchRegex(content, "request", "highlight", configFilePath);
|
||
} else {
|
||
content = messageInfo.getResponse();
|
||
// 流量清洗
|
||
List<String> mimeList = helpers.analyzeResponse(content).getHeaders();
|
||
// 正则判断
|
||
if (mh.matchMIME(mimeList)) {
|
||
return;
|
||
}
|
||
try {
|
||
String c = new String(content, "UTF-8").intern();
|
||
} catch (UnsupportedEncodingException e) {
|
||
e.printStackTrace();
|
||
}
|
||
jsonObj = ec.matchRegex(content, "response", "highlight", configFilePath);
|
||
}
|
||
|
||
List<String> colorList = da.highlightList(jsonObj);
|
||
if (colorList.size() != 0) {
|
||
String color = uc.getEndColor(gck.getColorKeys(colorList, Config.colorArray), Config.colorArray);;
|
||
messageInfo.setHighlight(color);
|
||
}
|
||
}
|
||
|
||
}
|
||
|
||
class MarkInfoTab implements IMessageEditorTab {
|
||
private ITextEditor markInfoText;
|
||
private byte[] currentMessage;
|
||
private final IMessageEditorController controller;
|
||
private byte[] extractRequestContent;
|
||
private byte[] extractResponseContent;
|
||
|
||
public MarkInfoTab(IMessageEditorController controller, boolean editable) {
|
||
this.controller = controller;
|
||
markInfoText = callbacks.createTextEditor();
|
||
markInfoText.setEditable(editable);
|
||
}
|
||
|
||
@Override
|
||
public String getTabCaption() {
|
||
return "MarkInfo";
|
||
}
|
||
|
||
@Override
|
||
public Component getUiComponent() {
|
||
return markInfoText.getComponent();
|
||
}
|
||
|
||
@Override
|
||
public boolean isEnabled(byte[] content, boolean isRequest) {
|
||
try {
|
||
// 流量清洗
|
||
String urlString = helpers.analyzeRequest(controller.getHttpService(), controller.getRequest()).getUrl().toString();
|
||
urlString = urlString.indexOf("?") > 0 ? urlString.substring(0, urlString.indexOf("?")) : urlString;
|
||
// 正则判断
|
||
if (mh.matchSuffix(urlString)) {
|
||
return false;
|
||
}
|
||
} catch (Exception e) {
|
||
return false;
|
||
}
|
||
|
||
|
||
if (isRequest) {
|
||
JSONObject jsonObj = ec.matchRegex(content, "request", "extract", configFilePath);
|
||
if (jsonObj.length() != 0) {
|
||
String result = da.extractString(jsonObj);
|
||
extractRequestContent = result.getBytes();
|
||
return true;
|
||
}
|
||
} else {
|
||
// 流量清洗
|
||
List<String> mimeList = helpers.analyzeResponse(controller.getResponse()).getHeaders();
|
||
// 正则判断
|
||
if (mh.matchMIME(mimeList)) {
|
||
return false;
|
||
}
|
||
JSONObject jsonObj = ec.matchRegex(content, "response", "extract", configFilePath);
|
||
if (jsonObj.length() != 0) {
|
||
String result = da.extractString(jsonObj);
|
||
extractResponseContent = result.getBytes();
|
||
return true;
|
||
}
|
||
}
|
||
return false;
|
||
}
|
||
|
||
@Override
|
||
public byte[] getMessage() {
|
||
return currentMessage;
|
||
}
|
||
|
||
@Override
|
||
public boolean isModified() {
|
||
return markInfoText.isTextModified();
|
||
}
|
||
|
||
@Override
|
||
public byte[] getSelectedData() {
|
||
return markInfoText.getSelectedText();
|
||
}
|
||
|
||
/*
|
||
* 使用setMessage用来做Extractor
|
||
*/
|
||
@Override
|
||
public void setMessage(byte[] content, boolean isRequest) {
|
||
try {
|
||
String c = new String(content, "UTF-8").intern();
|
||
} catch (UnsupportedEncodingException e) {
|
||
e.printStackTrace();
|
||
}
|
||
if (content.length > 0) {
|
||
if (isRequest) {
|
||
markInfoText.setText(extractRequestContent);
|
||
} else {
|
||
markInfoText.setText(extractResponseContent);
|
||
}
|
||
}
|
||
currentMessage = content;
|
||
}
|
||
}
|
||
|
||
|
||
|
||
public static void main(String[] args) {
|
||
}
|
||
} |