使用IDEA的Maven构建项目并使用BurpSuite新的接口montoya-api编写插件,简单示例如图所示:
import burp.api.montoya.BurpExtension;
import burp.api.montoya.MontoyaApi;
import burp.api.montoya.http.handler.*;
public class RegisterMyClass implements BurpExtension {
@Override
public void initialize(MontoyaApi montoyaApi) {
montoyaApi.extension().setName("test");
montoyaApi.http().registerHttpHandler(new HttpHandler() {
@Override
public RequestToBeSentAction handleHttpRequestToBeSent(HttpRequestToBeSent httpRequestToBeSent) {
return RequestToBeSentAction.continueWith(httpRequestToBeSent);
}
@Override
public ResponseReceivedAction handleHttpResponseReceived(HttpResponseReceived httpResponseReceived) {
return ResponseReceivedAction.continueWith(httpResponseReceived);
}
});
}
}
打成jar后,加载到BurpSuite工具时报错,报错如图所示:
java.lang.Exception: Extension class is not a recognized type
at burp.zc5.H(Unknown Source)
at burp.zc5.T(Unknown Source)
at burp.m3w.y(Unknown Source)
at burp.m_.P(Unknown Source)
at burp.v8m.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
一直弄不清楚咋回事?
和我之前创建的项目对比之后没发现什么区别,一直没搞懂。
最后:
本地JDK使用的17版本,Maven的相关配置如下:
<properties>
<maven.compiler.source>17</maven.compiler.source>
<maven.compiler.target>17</maven.compiler.target>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<packaging>jar</packaging>
</properties>
<dependencies>
<dependency>
<groupId>net.portswigger.burp.extensions</groupId>
<artifactId>montoya-api</artifactId>
<version>2023.3</version>
</dependency>
</dependencies>
可尝试如下方法:
方法一:
使用命令mvn install进行构建项目,我尝试是可以的。
我使用IDEA的构建工具打包之后加载到BurpSuite报错,但使用Mvn打包之后就可以加载成功无报错。
mvn打包之后BurpSuite加载成功,无报错:
方法二:
这个方法才是正确的操作:
进入项目结构->项目设置->工件,新建工件时选择第二项“来自具有依赖的模块”,如图所示,
备注:如果选择第一个“无”,就会出现打成jar包之后,BurpSuite加载插件出现报错:
java.lang.Exception: Extension class is not a recognized type
at burp.zc5.H(Unknown Source)
at burp.zc5.T(Unknown Source)
at burp.m3w.y(Unknown Source)
at burp.m_.P(Unknown Source)
at burp.v8m.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
默认配置,继续下一步:
保存配置即可:
重新打包,如图所示:
使用BurpSuite加载插件,成功加载,如图所示:
搞定。。。