Path: blob/master/external/burp-proxy/wmap_plugin_v0.1-burp_v1.1.jar
24660 views
PK ��(: META-INF/MANIFEST.MF�� �M��LK-.�
K-*��ϳR0�3���� PK�� PK
$��9��3�m m IBurpExtender.class���� 2
IBurpExtender java/lang/Object ACTION_FOLLOW_RULES I
ConstantValue ACTION_DO_INTERCEPT ACTION_DONT_INTERCEPT ACTION_DROP setCommandLineArgs ([Ljava/lang/String;)V processProxyMessage x(IZLjava/lang/String;IZLjava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;[B[I)[B registerHttpRequestMethod /(Ljava/lang/reflect/Method;Ljava/lang/Object;)V applicationClosing ()V
SourceFile IBurpExtender.java
PK
#��9lc G� � IBurpExtender.java
public interface IBurpExtender
{
public void setCommandLineArgs(String[] args);
public byte[] processProxyMessage(
int messageReference,
boolean messageIsRequest,
String remoteHost,
int remotePort,
boolean serviceIsHttps,
String httpMethod,
String url,
String resourceType,
String statusCode,
String responseContentType,
byte[] message,
int[] action);
public final static int ACTION_FOLLOW_RULES = 0;
public final static int ACTION_DO_INTERCEPT = 1;
public final static int ACTION_DONT_INTERCEPT = 2;
public final static int ACTION_DROP = 3;
public void registerHttpRequestMethod(
java.lang.reflect.Method makeHttpRequestMethod,
Object makeHttpRequestObject);
public void applicationClosing();
}
PK
��9�KY`
Request.class���� 2 � Request java/lang/Object host Ljava/lang/String; port I ssl Z method path header query body responsecode responseheader responsebody timestamp Ljava/util/Date;
getHeaders ([B)Ljava/lang/String; Code java/lang/String
<init> ([B)V
! " # split '(Ljava/lang/String;)[Ljava/lang/String; % java/lang/StringBuilder
$ ' ( ()V
* + , length ()I
$ . / 0 append -(Ljava/lang/String;)Ljava/lang/StringBuilder;
$ 2 3 4 toString ()Ljava/lang/String; LineNumberTable LocalVariableTable this LRequest; message [B tmpString headerArray [Ljava/lang/String; headers Ljava/lang/StringBuilder; i
StackMapTable : = getBodyContent bodyArray
responsestart
' I K M O
Q S U
W Y [ ] _ getHost setHost (Ljava/lang/String;)V param getPort setPort (I)V getSSL ()Z setSSL (Z)V getMethod setMethod getPath setPath getQuery setQuery getBody setBody
t D getHeader setHeader
x getResponseCode setResponseCode getResponseHeader setResponseHeader getResponseBody setResponseBody getTimestamp ()Ljava/util/Date; � setTimestamp (Ljava/util/Date;)V
SourceFile Request.java !
� O� Y+� M, � N� $Y� &:6� &-2� )� � -2� -W � -W�-����� 1� 5 & - 7 ? I 6 > O 7 8 O 9 : F ; ? < = 6 > ? - @ A � B C $
� D 3 i� Y+� M, � N� $Y� &:66� 6-2� )� �
�-����`6� -2� -W � -W�-����� 1� 5 6
! " # $ & " ' & ( 4 & > , G - Q . Y , c 1 6 R i 7 8 i 9 : ` ; Y E = P ? M F @ D @ A $ � " B C $ � � ( � F*� G*H� J*P� L*� N*H� P*H� R*H� T*H� V*H� X*H� Z*H� \*H� ^� 5 6
4 5
6 7 8 9 ! : ' ; - < 3 = 9 > ? ? E @ 6 F 7 8 ` 4 / *� J� 5 B 6 7 8 a b : *+� J� 5 C 6 7 8 c d , / *� L� 5 E 6 7 8 e f : *� L� 5 F 6 7 8 c g h / *� N� 5 H 6 7 8 i j : *� N� 5 I 6 7 8 c
k 4 / *� P� 5 K 6 7 8 l b : *+� P� 5 L 6 7 8 c m 4 / *� R� 5 N 6 7 8 n b : *+� R� 5 O 6 7 8 c o 4 / *� V� 5 Q 6 7 8 p b : *+� V� 5 R 6 7 8 c q 4 / *� X� 5 T 6 7 8 r >
**+� s� X� 5 U 6
7 8
c : u 4 / *� T� 5 W 6 7 8 v >
**+� w� T� 5 X 6
7 8
c : y 4 / *� Z� 5 Z 6 7 8 z b : *+� Z� 5 [ 6 7 8 c { 4 / *� \� 5 ] 6 7 8 | >
**+� w� \� 5 ^ 6
7 8
c : } 4 / *� ^� 5 ` 6 7 8 ~ >
**+� s� ^� 5 a 6
7 8
c : � / *� �� 5 c 6 7 8 � � : *+� �� 5 d 6 7 8 c � �PK
xn�9T�h$( ( Request.javaimport java.util.Date;
public class Request {
private String host;
private int port;
private boolean ssl;
private String method;
private String path;
private String header;
private String query;
private String body;
private String responsecode;
private String responseheader;
private String responsebody;
private Date timestamp;
private String getHeaders(byte[] message) {
String tmpString = new String(message);
String[] headerArray = tmpString.split("\n");
StringBuilder headers = new StringBuilder();
for (int i=1; i< headerArray.length; i++) {
if (headerArray[i].length() == 1) break;
headers.append(headerArray[i]);
headers.append("\n");
}
return headers.toString();
}
private String getBodyContent(byte[] message) {
String tmpString = new String(message);
String[] bodyArray = tmpString.split("\n");
StringBuilder body = new StringBuilder();
int responsestart = 0;
for (int i=1; i< bodyArray.length; i++) {
responsestart = i;
if (bodyArray[i].length() == 1) break;
}
for (int i=responsestart+1; i < bodyArray.length; i++) {
body.append(bodyArray[i]);
body.append("\n");
}
return body.toString();
}
public Request() {
host = "";
port = 80;
ssl = false;
method = "";
path = "";
header = "";
query = "";
body = "";
responsecode = "";
responseheader = "";
responsebody = "";
}
public String getHost() { return host;}
public void setHost(String param) { host = param;}
public int getPort() { return port; }
public void setPort(int param) { port = param; }
public boolean getSSL() { return ssl;}
public void setSSL(boolean param) {ssl = param; }
public String getMethod() { return method;}
public void setMethod(String param) { method = param;}
public String getPath() { return path;}
public void setPath(String param) { path = param;}
public String getQuery() { return query;}
public void setQuery(String param) { query = param;}
public String getBody() { return body;}
public void setBody(byte[] param) { body = this.getBodyContent(param);}
public String getHeader() { return header;}
public void setHeader(byte[] param) { header = this.getHeaders(param);}
public String getResponseCode() { return responsecode;}
public void setResponseCode(String param) { responsecode = param;}
public String getResponseHeader() { return responseheader;}
public void setResponseHeader(byte[] param) { responseheader = this.getHeaders(param);}
public String getResponseBody() { return responsebody;}
public void setResponseBody(byte[] param) { responsebody = this.getBodyContent(param);}
public Date getTimestamp() { return timestamp;}
public void setTimestamp(Date param) { timestamp = param;}
}
PK
��(:W���� � BurpExtender.class���� 28 BurpExtender java/lang/Object
IBurpExtender
db_connection Ljava/sql/Connection; burpRequests Ljava/util/HashMap; Signature 1Ljava/util/HashMap<Ljava/lang/Integer;LRequest;>; <init> ()V Code
java/lang/System out Ljava/io/PrintStream; [+] Loading WMAP plugin 0.1
! java/io/PrintStream " # println (Ljava/lang/String;)V % java/util/HashMap
$ LineNumberTable LocalVariableTable this LBurpExtender; applicationClosing - [+] Closing database connection / 1 0 java/sql/Connection 2 close 4 *[-] Error: Can't close database connection 6 [+] Unloading WMAP plugin 8 java/sql/SQLException exception Ljava/sql/SQLException;
StackMapTable processProxyMessage x(IZLjava/lang/String;IZLjava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;[B[I)[B
? A @ java/net/InetAddress B C getByName *(Ljava/lang/String;)Ljava/net/InetAddress; E F err H 5[-] Error: can't resolve host. This shouldn't happen. J Request
I M \?
O Q P java/lang/String R S split '(Ljava/lang/String;)[Ljava/lang/String;
O U V W substring (I)Ljava/lang/String;
I Y Z # setPath
I \ ] # setQuery
? _ ` a getHostAddress ()Ljava/lang/String;
I c d # setHost
I f g h setPort (I)V
I j k l setSSL (Z)V
I n o # setMethod
I q r s setBody ([B)V
I u v s setHeader x java/util/Date
w
I { | } setTimestamp (Ljava/util/Date;)V
� � java/lang/Integer � � valueOf (I)Ljava/lang/Integer;
$ � � � put 8(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
$ � � � remove &(Ljava/lang/Object;)Ljava/lang/Object;
I � � # setResponseCode
I � � s setResponseHeader
I � � s setResponseBody � java/lang/StringBuilder � [+] Adding request:
� �
#
I � � a getMethod
� � � � append -(Ljava/lang/String;)Ljava/lang/StringBuilder; � |
I � � a getPath
I � � � getTimestamp ()Ljava/util/Date;
� � � � -(Ljava/lang/Object;)Ljava/lang/StringBuilder;
� � � a toString � �INSERT INTO requests(host,port,ssl,meth,path,headers,query,body,respcode,resphead,response,created )VALUES(?,?,?,?,?,?,?,?,?,?,?,?) / � � � prepareStatement 0(Ljava/lang/String;)Ljava/sql/PreparedStatement;
I � � a getHost � � � java/sql/PreparedStatement � � setString (ILjava/lang/String;)V
I � � � getPort ()I � � � � setInt (II)V
I � � � getSSL ()Z � � � �
setBoolean (IZ)V
I � � a getHeader
I � � a getQuery
I � � a getBody
I � � a getResponseCode
I � � a getResponseHeader
I � � a getResponseBody
w � � � � �
executeUpdate � java/lang/Exception messageReference I messageIsRequest Z
remoteHost Ljava/lang/String;
remotePort serviceIsHttps
httpMethod url resourceType
statusCode responseContentType message [B action [I ipAddress Ljava/net/InetAddress; Ljava/lang/Exception; request LRequest; pathAndQuery [Ljava/lang/String; insertStatement Ljava/sql/PreparedStatement; � � � registerHttpRequestMethod /(Ljava/lang/reflect/Method;Ljava/lang/Object;)V makeHttpRequestMethod Ljava/lang/reflect/Method; makeHttpRequestObject Ljava/lang/Object; usage
-[-] Error: Please set the database parameter. [-] Example: database=test.db
h exit setCommandLineArgs ([Ljava/lang/String;)V
= database
O equals (Ljava/lang/Object;)Z [+] Using database: " org.sqlite.JDBC
$&% java/lang/Class '( forName %(Ljava/lang/String;)Ljava/lang/Class;* jdbc:sqlite:
,.- java/sql/DriverManager /0
getConnection )(Ljava/lang/String;)Ljava/sql/Connection;2 $[-] Error: Can't create connection: args
parameters ex
SourceFile BurpExtender.java !
` "*� *� *� � � *� $Y� &� � '
! ( " ) * + � &� ,� *� � . � L� 3� � 5� � 7 ' % ( & ) * 9 : ; T 7 < = x �:
-� >:
�
:� DG� � |� IY� K:L� N:2� T� X�� 2� [
� ^� b� e� i� m � p � t� wY� y� z*� � ~� �W� *� � ~� �� I: � � � � � �� � �Y�� �� �� ��� �� �� ��� �� �� �� �� *� �� � :� �� � � �� � � ȹ � � �� � � �� � � й � � ӹ � � ֹ � � ٹ �
� ܹ � � ߹ � � �� � � � � W� :� � ��� 7 ' � & & ( * + . 1 # 3 , 4 9 6 I 7 S 8 Z 9 a : h ; o < v = � > � E � G � H � I � J � K � O P Q R- S: TH UV Vd Wr X� Y� Z� [� ]� c ( � � ) * � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
� � � � � � � � �
9 � # p � � , g � � � � � � � ; B � O O O O O O ? � � 2 I� I� 7 ? � ' k ( ) *
M � D � � D� �� ' n o p q ( ) * �+�� *�+2� NM,2�� ,�� *�� � �Y � �,2� �� �� !�#W*� �Y)� �,2� �� ��+� � !N� D� �Y1� �,2� �� �� �� B c f � ' 2 w x { } % ~ ) � B � I � f � g � � � � � ( * � ) * �3 � r4 � g 5 � ; � | � 6 7PK
��(:�u�u� � BurpExtender.javaimport java.lang.reflect.Method;
import java.sql.*;
import java.util.HashMap;
import java.util.Date;
import java.net.InetAddress;
public class BurpExtender implements IBurpExtender {
Connection db_connection = null;
HashMap<Integer,Request> burpRequests = null;
public BurpExtender() {
System.out.println("[+] Loading WMAP plugin 0.1");
burpRequests = new HashMap<Integer,Request>();
}
@Override
public void applicationClosing() {
System.out.println("[+] Closing database connection");
try {
db_connection.close();
}
catch(SQLException exception) {
System.out.println("[-] Error: Can't close database connection");
}
System.out.println("[+] Unloading WMAP plugin");
}
@Override
public byte[] processProxyMessage(int messageReference,
boolean messageIsRequest, String remoteHost, int remotePort,
boolean serviceIsHttps, String httpMethod, String url,
String resourceType, String statusCode, String responseContentType,
byte[] message, int[] action) {
// resolve the IP:
InetAddress ipAddress = null;
try {
ipAddress = InetAddress.getByName(remoteHost);
}
catch (Exception exception) {
System.err.println("[-] Error: can't resolve host. This shouldn't happen.");
}
if (messageIsRequest) {
Request request = new Request();
String pathAndQuery[] = url.split("\\?");
request.setPath(pathAndQuery[0].substring(1));
if(pathAndQuery.length == 2) request.setQuery(pathAndQuery[1]);
request.setHost(ipAddress.getHostAddress());
request.setPort(remotePort);
request.setSSL(serviceIsHttps);
request.setMethod(httpMethod);
request.setBody(message);
request.setHeader(message);
request.setTimestamp(new Date());
burpRequests.put(messageReference, request);
}
else {
try {
Request request = burpRequests.remove(messageReference);
request.setResponseCode(statusCode);
request.setResponseHeader(message);
request.setResponseBody(message);
System.out.println("[+] Adding request: " + request.getMethod() + "|" + request.getPath() + "|" + request.getTimestamp());
PreparedStatement insertStatement = db_connection.prepareStatement("INSERT INTO requests(host,port,ssl,meth,path,headers,query,body,respcode,resphead,response,created )" +
"VALUES(?,?,?,?,?,?,?,?,?,?,?,?)");
insertStatement.setString(1, request.getHost());
insertStatement.setInt(2, request.getPort());
insertStatement.setBoolean(3, request.getSSL());
insertStatement.setString(4, request.getMethod());
insertStatement.setString(5, request.getPath());
insertStatement.setString(6, request.getHeader());
insertStatement.setString(7, request.getQuery());
insertStatement.setString(8, request.getBody());
insertStatement.setString(9, request.getResponseCode());
insertStatement.setString(10, request.getResponseHeader());
insertStatement.setString(11, request.getResponseBody());
insertStatement.setString(12, request.getTimestamp().toString());
insertStatement.executeUpdate();
}
catch(SQLException exception) {
}
}
return null;
}
@Override
public void registerHttpRequestMethod(Method makeHttpRequestMethod,
Object makeHttpRequestObject) {
// TODO Auto-generated method stub
}
private void usage() {
System.err.println("[-] Error: Please set the database parameter.");
System.err.println("[-] Example: database=test.db");
System.exit(1);
}
@Override
public void setCommandLineArgs(String[] args) {
// I know we can solve this with one if, but it doesn't work, don't ask me why...
if (args.length == 0) {
usage();
}
String[] parameters = args[0].split("=");
if (!parameters[0].equals("database") || parameters.length != 2) {
usage();
}
System.out.println("[+] Using database: " + parameters[1]);
try {
Class.forName("org.sqlite.JDBC");
db_connection = DriverManager.getConnection("jdbc:sqlite:" + parameters[1]);
}
catch(Exception ex) {
System.err.println("[-] Error: Can't create connection: " + parameters[1]);
System.exit(1);
}
}
}
PK
�l�9���� � .project<?xml version="1.0" encoding="UTF-8"?>
<projectDescription>
<name>Burp1.1WMAPPlugin</name>
<comment></comment>
<projects>
</projects>
<buildSpec>
<buildCommand>
<name>org.eclipse.jdt.core.javabuilder</name>
<arguments>
</arguments>
</buildCommand>
</buildSpec>
<natures>
<nature>org.eclipse.jdt.core.javanature</nature>
</natures>
</projectDescription>
PK ��(:�� META-INF/MANIFEST.MF�� PK
$��9��3�m m a IBurpExtender.classPK
#��9lc G� � � IBurpExtender.javaPK
��9�KY`
� Request.classPK
xn�9T�h$( ( Request.javaPK
��(:W���� � q! BurpExtender.classPK
��(:�u�u� � m7 BurpExtender.javaPK
�l�9���� � �H .projectPK � /J