jetlib.sec » Tags » burp

Feeds

268039 items (8 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines (8 unread)
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

4 items tagged "burp"

Related tags: suite v1 [+], suite [+], read [+], hacking [+], cktricky [+], buby [+], Tools [+], wxf [+], web application security [+], web [+], ruby [+], robust framework [+], rhost [+], platform [+], new feature [+], jruby [+], jar file [+], framework [+], execution environment [+], eric [+], edition v1 [+], darknet [+], code execution [+]

• June 08, 2011
• 4:00

  Burp Suite Free Edition v1.4 – Web Application Security Testing Tool

   » ‎ Darknet
  We love Burp Suite and we have since wayyyy back, the last update we posted was around 18 months ago back in January 2010 – Burp Suite v1.3 Released – Integrated Platform For Attacking Web Applications. For the two people here who don’t know what this tool does, Burp Suite is an integrated platform for [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  suite web burp read web-application-security edition-v1 suite-v1 hacking Tools  

• May 22, 2011
• 7:56

  JRuby + Buby + wXf = fun

   » ‎ Carnal0wnage
  The Web Exploitation Framework has created two separate versions of the console. The version you get depends on the environment it is started in.
  
  If JRuby, as of now, you get a version of the framework that allows you to interact with Burp from the console and run Buby scripts (with the flexibility of changing options easily and quickly).
  
  Here is a video of this new step for the framework:
  
  
  Buby Module from cktricky on Vimeo.
  
  Documentation can be found at the wiki page for wXf.
  
  For those of you who have been following the Buby Script Basics of this blog, I hope you'll apply that knowledge to creating a module in wXf. This is a great way for us to share our individual scripts in a way that allows them to be customized on the fly (because the console can set options like the rhost, rport, content to extract, etc.)
  
  Anyway, hopefully this new feature of the framework can continue to grow and become a more powerful feature.
  
  Happy Hacking,
  
  ~cktricky

  Tags:  framework wxf buby rhost burp new-feature cktricky  

• May 07, 2011
• 17:59

  Buby Script Basics Part 1

   » ‎ Carnal0wnage
  For those of you who are new to Buby, it is a platform to write Ruby based extensions for the Burp Suite API and I'm going to attempt to cover some of the basics.  First let me say thank you to Tebo for providing his insight. Tebo is the author of the Buby.kicks_ass => true article. Additionally, thank you Eric Monti the creator of Buby. Buby's homepage is located Here .
  
  Installing:
  
  Although you can write Ruby code, this is a JRuby Gem. What does this mean? It means that the code execution environment is JRuby (Java+Ruby) and the Gem should be installed in the JRuby environment.
  
  Lets install JRuby first:
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  Next, install the Buby Gem.
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  Basic example of running a script:
  
  
  
  
  
  
  
  
  
  The options you see explained
  
  jruby -S buby  => runs the jruby environment leveraging the buby gem
  
  -i  => interactive, this means you can interact with Burp from the console.
  
  -B => this is the location of your Burp jar file
  
  -r => The script you'd like to run. This is an easy way to run the buby code you've created.
  
  Finally, an example of sending a command to burp via the -i (interactive option). Here we produce an alert "Hello World".
  
  
  
  
  
  
  
  
  
  
  
  
  
  
  Pre-command
  
  
  
  
  Command
  
  
  
  Post Command
  
  
  Okay so that wraps up Part 1 of Buby Basics.
  
  If you'd like some scripts to mess around before Part 2, you can find some scripts I put together Here.
  
  ~Happy Hacking
  
  cktricky

  Tags:  jruby burp buby eric ruby execution-environment code-execution jar-file cktricky  

• January 22, 2010
• 1:48

  Burp Suite v1.3 Released – Integrated Platform For Attacking Web Applications

   » ‎ Darknet
  Burp Suite is an integrated platform for attacking web applications. It contains all of the Burp tools with numerous interfaces between them designed to facilitate and speed up the process of attacking an application. All tools share the same robust framework for handling HTTP requests, persistence, authentication, upstream proxies, logging,...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  platform suite burp read robust-framework suite-v1 darknet hacking Tools