Skip to content

Repository files navigation

burpjsluice

Burp Suite extension for jsluice tool by tomnomnom

https://github.com/BishopFox/jsluice

How it works

The extension analyzes proxy responses and identifies in-scope scripts, then writes the contents to a temporary file and executes jsluice urls [...].

A limited number of coroutines are used to ensure moderate CPU usage. Findings are then displayed in a table in the BurpJsluice tab, which can be filtered via regex. All findings can be exported as CSV, copied to the clipboard, and sent to Repeater.

This has only been tested on Linux.

Screenshot

plot

References

https://bishopfox.com/blog/power-pen-tests-with-montoya-api

https://github.com/PortSwigger/additional-cors-checks/

https://bishopfox.com/blog/jsluice-javascript-technical-deep-dive

About

Burp Suite extension for jsluice tool by tomnomnom

Resources

Stars

2 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages