Awesome
Bug Diaries
Burp Issues for All!
Bug Diaries is a Burp extension that implements an bug tracker for the community edition of Burp.
It's under heavy development but the master
branch works.
Originally, the extension was written in Python. While the Python version works, the Java version has more capabilities. See the Python version inside @Python.
Usage
- Add the pre-built jar file at release/BugDiaries-all.jar.
Building The Extension
- Clone the repository.
- Setup Open JDK 11.
- Setup Gradle.
- Use the instructions at: https://gradle.org/install/
- If you prefer the Wrapper:
- *nix:
./gradlew wrapper --gradle-version=6.0.1 --distribution-type=bin
- Windows:
gradlew.bat wrapper --gradle-version=6.0.1 --distribution-type=bin
- *nix:
- Run
gradle bigjar
orgradlew[.bat] bigjar
(if you use the Wrapper). - The newly built jar file will be at release/BugDiaries-all.jar.
Development
For more information about my development process (and debugging Burp extensions), please see the following blog post:
Features
Adding a New Bug
- Right click on any request and select
Send to Bug Diaries
.- Every tab that supports context menus in Burp works. E.g., Target, Proxy, and Repeater.
- A new frame pops up with the request, response, host, and path (based on the request), already populated.
- Set a name for your bug.
- Optionally, select a template. The template will overwrite description,
remediation, and add the CWE number and name to the bug name.
- See below on how to customize it.
- Press
Save
. - The bug will be added to the
Bug Diaries
tab.
Viewing Bugs
- In the
Bug Diaries
tab, select any bug. - The details will be populated in the panel.
Sending Requests to Other Burp tabs
- Right click on the request or response message editor for any bug in the main tab.
- Send the request or response to any other Burp tab such as Repeater, Comparer, or Intruder.
Editing Bugs
- Double click on any bug, in the
Bug Diaries
tab. - A new frame will pop-up that allows editing.
- Edit the bug and press
Save
. - Modified bug will be displayed in the table.
Exporting Bugs
Bug Diaries supports exporting bugs to JSON.
- In the
Bug Diaries
tab clickExport
. - Select a file in the dialog. By default, only
.json
files are displayed.- The extension remembers your last used directory.
- The extension does not warn you if a file already exists.
- Bugs will be exported in JSON format to the file.
Importing Bugs
The JSON file can be imported again.
Note: Importing will overwrite current bugs.
- In the
Bug Diaries
tab clickImport
. - Select the file with exported bugs.
- Bugs are not populated in the table. As mentioned above, current items in the table are overwritten.
TODO
A lot. See Github issues for som planned features.
Bugs
Please make a Github issue.
License
GPLv3, see LICENSE for details.