From d37371005c32b6928c35b78ab3da16a0f37ed4f4 Mon Sep 17 00:00:00 2001 From: Eduardo Garcia Date: Mon, 19 Aug 2019 11:23:10 +0200 Subject: [PATCH] Burp Bounty 3.0.6beta --- README.md | 8 +++++++- src/BurpBountyExtension.java | 2 +- src/BurpBountyGui.form | 22 ++++++++++++---------- src/BurpBountyGui.java | 19 ++++++++++--------- src/GenericScan.java | 8 +++++--- 5 files changed, 35 insertions(+), 24 deletions(-) diff --git a/README.md b/README.md index 6a6a078..d00311a 100755 --- a/README.md +++ b/README.md @@ -29,6 +29,8 @@ This Burp Suite extension allows you, in a quick and simple way, to improve the * Profiles from [Gocha](https://twitter.com/GochaOqradze) in their [Github](https://github.com/ghsec/BBProfiles) +* Profiles from [Sy3Omda](https://twitter.com/Sy3Omda) in their [Github](https://github.com/Sy3Omda/burp-bounty) + ### For example videos please visit our youtube channel: @@ -36,7 +38,11 @@ This Burp Suite extension allows you, in a quick and simple way, to improve the ## Changelog -**3.0.5beta 201906112** +**3.0.6beta 20190819** +* Fixed error with tab +* Fixed error with status code + +**3.0.5beta 20190612** * Choose insertion points type for one profile * Fixed error with redirections diff --git a/src/BurpBountyExtension.java b/src/BurpBountyExtension.java index 251f959..d82bd7f 100644 --- a/src/BurpBountyExtension.java +++ b/src/BurpBountyExtension.java @@ -77,7 +77,7 @@ public void registerExtenderCallbacks(IBurpExtenderCallbacks callbacks) { optionsTab = new JScrollPane(panel, ScrollPaneConstants.VERTICAL_SCROLLBAR_AS_NEEDED, ScrollPaneConstants.HORIZONTAL_SCROLLBAR_AS_NEEDED); callbacks.addSuiteTab(this); - callbacks.printOutput("- Burp Bounty v3.0.5beta"); + callbacks.printOutput("- Burp Bounty v3.0.6beta"); callbacks.printOutput("- For bugs please on the official github: https://github.com/wagiro/BurpBounty/"); callbacks.printOutput("- Created by Eduardo Garcia Melia "); bct.start(); diff --git a/src/BurpBountyGui.form b/src/BurpBountyGui.form index 2e83884..70d6ddd 100644 --- a/src/BurpBountyGui.form +++ b/src/BurpBountyGui.form @@ -78,8 +78,8 @@ - - + + @@ -125,7 +125,6 @@ - @@ -156,7 +155,11 @@ - + + + + + @@ -184,8 +187,7 @@ - - + @@ -1084,7 +1086,7 @@ - + @@ -1961,7 +1963,7 @@ - + @@ -2566,7 +2568,7 @@ - + @@ -2808,7 +2810,7 @@ - + diff --git a/src/BurpBountyGui.java b/src/BurpBountyGui.java index 7c8f7a7..6705e36 100644 --- a/src/BurpBountyGui.java +++ b/src/BurpBountyGui.java @@ -3135,7 +3135,7 @@ public void itemStateChanged(java.awt.event.ItemEvent evt) { .addComponent(variationsRadio)) .addGap(0, 0, Short.MAX_VALUE)) .addGroup(jPanel11Layout.createSequentialGroup() - .addComponent(jSeparator12, javax.swing.GroupLayout.DEFAULT_SIZE, 4, Short.MAX_VALUE) + .addComponent(jSeparator12, javax.swing.GroupLayout.DEFAULT_SIZE, 1, Short.MAX_VALUE) .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED) .addComponent(jSeparator11, javax.swing.GroupLayout.PREFERRED_SIZE, 952, javax.swing.GroupLayout.PREFERRED_SIZE)) .addGroup(jPanel11Layout.createSequentialGroup() @@ -3412,7 +3412,7 @@ public void itemStateChanged(java.awt.event.ItemEvent evt) { .addGroup(jPanel12Layout.createSequentialGroup() .addContainerGap() .addGroup(jPanel12Layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING) - .addComponent(jSeparator8, javax.swing.GroupLayout.DEFAULT_SIZE, 950, Short.MAX_VALUE) + .addComponent(jSeparator8, javax.swing.GroupLayout.DEFAULT_SIZE, 944, Short.MAX_VALUE) .addComponent(jSeparator9) .addComponent(jLabel33) .addComponent(jLabel35) @@ -3620,7 +3620,6 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { jPanel1.setLayout(jPanel1Layout); jPanel1Layout.setHorizontalGroup( jPanel1Layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING) - .addComponent(headerstab, javax.swing.GroupLayout.PREFERRED_SIZE, 0, Short.MAX_VALUE) .addGroup(jPanel1Layout.createSequentialGroup() .addGap(19, 19, 19) .addGroup(jPanel1Layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING) @@ -3647,7 +3646,10 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { .addComponent(radio1) .addComponent(radio2) .addComponent(radioPR)))) - .addContainerGap(javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE)) + .addContainerGap(36, Short.MAX_VALUE)) + .addGroup(jPanel1Layout.createSequentialGroup() + .addComponent(headerstab, javax.swing.GroupLayout.PREFERRED_SIZE, 0, Short.MAX_VALUE) + .addContainerGap()) ); jPanel1Layout.linkSize(javax.swing.SwingConstants.HORIZONTAL, new java.awt.Component[] {jButton2, jButton3}); @@ -3674,8 +3676,7 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED) .addComponent(radioPR) .addGap(18, 18, 18) - .addComponent(headerstab, javax.swing.GroupLayout.PREFERRED_SIZE, 1361, Short.MAX_VALUE) - .addContainerGap()) + .addComponent(headerstab, javax.swing.GroupLayout.PREFERRED_SIZE, 1405, Short.MAX_VALUE)) ); jTabbedPane2.addTab(" Profiles Definition ", jPanel1); @@ -3819,7 +3820,7 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { .addGroup(jPanel2Layout.createSequentialGroup() .addGap(18, 18, 18) .addComponent(jtabpane, javax.swing.GroupLayout.PREFERRED_SIZE, 543, javax.swing.GroupLayout.PREFERRED_SIZE))) - .addContainerGap(776, Short.MAX_VALUE)) + .addContainerGap(858, Short.MAX_VALUE)) ); jTabbedPane2.addTab(" Profiles Manager ", jPanel2); @@ -3891,7 +3892,7 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { .addComponent(jButton12)) .addComponent(jButton13) .addComponent(jScrollPane13, javax.swing.GroupLayout.PREFERRED_SIZE, 296, javax.swing.GroupLayout.PREFERRED_SIZE)) - .addContainerGap(1076, Short.MAX_VALUE)) + .addContainerGap(1158, Short.MAX_VALUE)) ); jTabbedPane2.addTab(" Tags Manager ", jPanel4); @@ -3923,7 +3924,7 @@ public void actionPerformed(java.awt.event.ActionEvent evt) { .addComponent(text11, javax.swing.GroupLayout.PREFERRED_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.PREFERRED_SIZE) .addComponent(jButton1)) .addGap(48, 48, 48) - .addComponent(jTabbedPane2, javax.swing.GroupLayout.PREFERRED_SIZE, 1499, javax.swing.GroupLayout.PREFERRED_SIZE) + .addComponent(jTabbedPane2, javax.swing.GroupLayout.PREFERRED_SIZE, 1581, javax.swing.GroupLayout.PREFERRED_SIZE) .addContainerGap()) ); }// //GEN-END:initComponents diff --git a/src/GenericScan.java b/src/GenericScan.java index 94de5d7..7748bec 100644 --- a/src/GenericScan.java +++ b/src/GenericScan.java @@ -416,7 +416,7 @@ public List runAScan(IHttpRequestResponse baseRequestResponse, IScan responseCode = new Integer(r.getStatusCode()); if (responseCodes.contains(responseCode)) { - if (!isresponsecode && isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { + if (isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { for (String grep : greps) { matches = gm.getResponseMatches(requestResponse, payload, grep, issuename, issuedetail, issuebackground, remediationdetail, remediationbackground, charstourlencode, matchtype, issueseverity, issueconfidence, notresponse, casesensitive, urlencode, excludeHTTP, onlyHTTP); @@ -435,7 +435,7 @@ public List runAScan(IHttpRequestResponse baseRequestResponse, IScan requestResponse.setResponse(redirectRequestResponse.getResponse()); } else { - if (!isresponsecode && isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { + if (isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { for (String grep : greps) { matches = gm.getResponseMatches(requestResponse, payload, grep, issuename, issuedetail, issuebackground, remediationdetail, remediationbackground, charstourlencode, matchtype, issueseverity, issueconfidence, notresponse, casesensitive, urlencode, excludeHTTP, onlyHTTP); @@ -511,7 +511,7 @@ public List runPScan(IHttpRequestResponse baseRequestResponse) throw Integer responseCode = new Integer(r.getStatusCode()); IScanIssue matches = null; - if (!isresponsecode && isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { + if (isResponseCode(responsecode, negativerc, responseCode) || !iscontenttype && isContentType(contenttype, negativect, r)) { matches = gm.getResponseMatches(baseRequestResponse, "", grep, issuename, issuedetail, issuebackground, remediationdetail, remediationbackground, "", matchtype, issueseverity, issueconfidence, notresponse, casesensitive, false, excludeHTTP, onlyHTTP); } @@ -683,6 +683,7 @@ public int getContentLength(IHttpRequestResponse response) { public boolean isResponseCode(String responsecodes, boolean negativerc, Integer responsecode) { boolean iscode = true; + if (responsecodes.equals("")) { return iscode; } @@ -703,6 +704,7 @@ public boolean isResponseCode(String responsecodes, boolean negativerc, Integer break; } } + return iscode; }