Welcome to BurpKit
For example, imagine building an intruder payload generator that dynamically generates a word list while crawling a Web 2.0 web application such as Twitter. Or maybe using the BurpScript extensions to scrape web pages and save those results to a file. What about building a better web spider that can render AJAX-based pages and send discovered content to the active scanner? All this can be done with BurpKit and more!
BurpKit has the following system requirements:
- Oracle JDK >=8u50 and <9 (Download)
- At least 4GB of RAM
Installing BurpKit is simple:
- Download the latest prebuilt release from the GitHub releases page.
- Open BurpSuite and navigate to the
Burp Extensionsclick the
- In the
Load Burp Extensiondialog, make sure that
Extension Typeis set to
Javaand click the
Select file ...button under
- Select the
BurpKit-<version>.jarfile and click
If all goes well, you will see three additional top-level tabs appear in BurpSuite:
BurpKitty: a courtesy browser for navigating the web within BurpSuite.
Jython: an integrated python interpreter console and lightweight script text editor.
BurpKit is distributed as an IntelliJ IDEA project. Once the project is opened in IntelliJ, compilation should be trivial. The JAR file can be built using the
Build Artifacts... menu item under the
Build menu. The compiled output will appear under the
The following sections detail known issues that have been discovered within BurpKit and possible workarounds.
No Upstream Proxy Support
Upstream proxies set within BurpSuite's
Options tab are currently not supported as there exists no way to monitor BurpSuite setting modifications. Therefore, upstream proxies will have to be configured at the system level or via the Java command line arguments. BurpKit may leverage BurpSuite's internal request framework in future releases.
Unhandled exceptions within the JavaFX event loop may trigger this condition. Currently, BurpKit-v1.01-pre attempts to resolve this issue. If you are still experiencing this issue, please run BurpSuite from the command line (e.g.
java -jar burpsuite_<version>.jar -Xmx4g) and open a GitHub issue with the following details:
- OS and system details (please include RAM size);
- Console output, if any;
- Java version (
java -version); and
- BurpSuite runtime arguments, if applicable.