{"id":13845880,"url":"https://github.com/pmiaowu/BurpHttpForwardRequests","last_synced_at":"2025-07-12T03:32:49.427Z","repository":{"id":44761267,"uuid":"193356712","full_name":"pmiaowu/BurpHttpForwardRequests","owner":"pmiaowu","description":"burp-http请求转发至其他模块的插件","archived":false,"fork":false,"pushed_at":"2020-09-13T06:57:51.000Z","size":2229,"stargazers_count":75,"open_issues_count":3,"forks_count":12,"subscribers_count":0,"default_branch":"master","last_synced_at":"2024-08-05T17:45:15.182Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pmiaowu.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-06-23T14:18:00.000Z","updated_at":"2024-08-05T07:17:40.000Z","dependencies_parsed_at":"2022-09-06T23:11:21.320Z","dependency_job_id":null,"html_url":"https://github.com/pmiaowu/BurpHttpForwardRequests","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pmiaowu%2FBurpHttpForwardRequests","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pmiaowu%2FBurpHttpForwardRequests/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pmiaowu%2FBurpHttpForwardRequests/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pmiaowu%2FBurpHttpForwardRequests/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pmiaowu","download_url":"https://codeload.github.com/pmiaowu/BurpHttpForwardRequests/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225791435,"owners_count":17524783,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:03:39.361Z","updated_at":"2024-11-21T19:30:48.643Z","avatar_url":"https://github.com/pmiaowu.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# 简介\n\nhttp请求转发酱一个可怜兮兮还不知道自己唯一使命的Burpsuite 转发插件 (°ー°〃)愣住\n\n注意: 该插件只会在以下几个burp模块运行\n- Burp Proxy模块\n- Burp Repeater模块\n\n此插件最大的作用就是配合作者其他的Burp插件进行漏洞扫描\n\n# 功能\n\n此插件会把所有的“Burp Proxy模块/Burp Repeater模块”请求转发到“Burp Scanner模块”进行扫描\n\n# 重点\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n使用该插件，请麻烦把该md文件全部看完，谢谢配合\n\n不然到时候该插件把请求转发给了burp的扫描模块，burp那些自带的插件一扫描就是几百个请求\n\n# 安装方法一 (推荐)\n\n注意：执行一遍这个以后，下一次就打开使用burp即可\n\n注意：执行一遍这个以后，下一次就打开使用burp即可\n\n注意：执行一遍这个以后，下一次就打开使用burp即可\n\n打开 Burp \n![](./readme/images/24.png)\n\n找到 /BurpHttpForwardRequests/burp-scan.conf.json 引入它，如下图\n![](./readme/images/25.png)\n\n接着就进入到了burp\n\nJython官网: https://www.jython.org/download\n\n注意一定要 2.7.1 这个版本\n\nJython环境安装包: https://repo1.maven.org/maven2/org/python/jython-standalone/2.7.1/jython-standalone-2.7.1.jar\n\n![](./readme/images/23.jpg)\n为了防止中文乱码，burp的显示语言，最好设置成图片显示的这样\n\n![](./readme/images/1.png)\n![](./readme/images/2.png)\n![](./readme/images/3.png)\n\n这样就安装完毕了 :)\n\n# 安装方法二\n\nJython官网: https://www.jython.org/download\n\n注意一定要 2.7.1 这个版本\n\nJython环境安装包: https://repo1.maven.org/maven2/org/python/jython-standalone/2.7.1/jython-standalone-2.7.1.jar\n\n![](./readme/images/23.jpg)\n为了防止中文乱码，burp的显示语言，最好设置成图片显示的这样\n\n![](./readme/images/1.png)\n![](./readme/images/2.png)\n![](./readme/images/3.png)\n![](./readme/images/14.png)\n![](./readme/images/6.png)\n![](./readme/images/13.png)\n\n# 使用例子\n\n安装完毕以后,任意打开一个url链接就可以了\n\n![](./readme/images/15.png)\n\n例如打开任意一个网站\n![](./readme/images/7.png)\n![](./readme/images/8.png)\n![](./readme/images/9.png)\n\n# 注意项-关于请求不转发的问题\n\n如果你发现一个“Burp Proxy模块请求”第一次可以成功转发到“Burp Scanner模块”,后面都不转发了,请注意这不是Bug!!!,这不是Bug!!!,这不是Bug!!!\n\n这是因为我添加了Url重复检测的判断\n\n你可以查看插件根目录下的“test_logs”文件夹,里面会以你的扫描域名生成一个“xxxx.com-xx年-xx月-xx日.log\"\n\n这个log会记录“Burp Proxy模块请求”转发到“Burp Scanner模块”的Url\n\n解决方案:\n1. 通过这个插件的Tag来关闭Url重复检测的功能\n2. 可以删除对应域名的文件,这样它就会重新转发了\n\n# Url黑名单添加\n\n在根目录你可以看到“black_url.txt”文件,打开此文件,一行一域名添加即可\n\n过滤某个域名: www.domain.com\n\n过滤某个域名的全部子域名: *.domain.com\n\n每个在“black_url.txt”文件里面的url此插件都不会进行转发\n\n![](./readme/images/4.png)\n\n# Url白名单添加\n\n白名单里面如果有数据,那么此插件就只会转发白名单里面的域名请求\n\n注意: 如果黑名单与白名单的域名冲突的话,那么黑名单的执行优先级更高!!!!!\n\n注意: 如果黑名单与白名单的域名冲突的话,那么黑名单的执行优先级更高!!!!!\n\n注意: 如果黑名单与白名单的域名冲突的话,那么黑名单的执行优先级更高!!!!!\n\n![](./readme/images/11.png)\n只转发某个域名: www.domain.com\n只转发某个域名的全部子域名: *.domain.com\n\n注意: 域名不需要填写 http:// 或是 https://\n\n# Tag面板配置项\n\n![](./readme/images/5.png)\n![](./readme/images/10.png)\n![](./readme/images/11.png)\n![](./readme/images/12.png)\n\n# Url调试功能添加\n\n新参数: is_burp_debug=True/False\n请求方法: Get\n\n功能: 如果您想调试某个url但是又不想此插件转发请求出去可以通过此功能实现\n\n## Url调试功能例子:\n\n例如说我现在有一个url: https://github.com/pmiaowu\n\n以前我们一访问他请求就转发到“Burp Scanner模块”了\n\n现在您可以输入: https://github.com/pmiaowu?is_burp_debug=True\n\n那么此请求就不会转发了 :)\n\n# 插件基本使用方法\n\n## url重复验证功能说明\n\n如果你发现一个“Burp Proxy模块请求”第一次可以成功转发到“Burp Scanner模块”,后面都不转发了,请注意这不是Bug!!!,这不是Bug!!!,这不是Bug!!!\n\n转发插件默认启动Url重复检测的判断\n\n你可以查看插件根目录下的“test_logs”文件夹,里面会以你的扫描域名生成一个“xxxx.com-xx年-xx月-xx日.log\"\n\n这个log会记录“Burp Proxy模块请求”转发到“Burp Scanner模块”的Url\n\n如果你想要重新转发相同的请求的话, 有三个方法\n\n\n\n```\n方法一-临时有效的\n\n进入“test_logs”文件夹 删除里面的内容\n```\n![](./readme/images/16.png)\n\n\n\n```\n方法二-临时有效的\n\n进入 http请求转发插件-基本设置 这个tag\n\n里面有个 “是否启动url重复验证” 把那个勾取消即可\n```\n![](./readme/images/17.png)\n\n\n\n```\n方法三-永久有效的\n\n打开 “config\\forwardRequests.py” 这个文件\n\n找到一个配置 “URL_REPEATED_VERIFY” 修改为 False 即可\n```\n![](./readme/images/18.png)\n\n## 白名单域名功能-设置方法\n\n注意: 域名不需要填写 http:// 或是 https://\n\n### 转发全部链接-设置方法\n\n![](./readme/images/15.png)\n\n这样每个请求就都会进行转发了\n\n### 转发某个域名请求-设置方法\n\n如果想要每个域名的请求进行转发, 那也是可以的\n\n例子一: 转发 www.baidu.com 的请求设置方法如下\n![](./readme/images/19.png)\n\n\n\n例子二: 转发 所有baidu.com 的请求设置方法如下\n![](./readme/images/20.png)\n\n\n例子三: 转发 ip 的请求设置方法如下\n![](./readme/images/21.png)\n\n### 转发某个链接-设置方法\n\n假设我们现在在 Burp Repeater模块 有一个请求想要进行转发, 那么可以这样转发\n![](./readme/images/22.png)\n\n# 请求转发到xray\n由钧钧新增的功能\n\n默认不启动，如果想要修改为默认启动请以下文件\n\n配置路径：config/forwardRequests.py\n\n```\n里面有个配置 URL_FORWARD_XRAY = False 将他修改为 URL_FORWARD_XRAY = True\n即可修改为 默认启动\n```\n\n使用方法如下图\n![](./readme/images/26.png)\n\n接着请求就会正常转发到xray了","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpmiaowu%2FBurpHttpForwardRequests","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpmiaowu%2FBurpHttpForwardRequests","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpmiaowu%2FBurpHttpForwardRequests/lists"}