https://github.com/JGillam/burp-paramalyzer

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
https://github.com/JGillam/burp-paramalyzer

pentesting

Last synced: 2 months ago
JSON representation

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

• Host: GitHub
• URL: https://github.com/JGillam/burp-paramalyzer
• Owner: JGillam
• Created: 2015-09-17T16:04:31.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2022-10-01T02:25:15.000Z (over 2 years ago)
• Last Synced: 2024-10-28T14:46:14.257Z (3 months ago)
• Topics: pentesting
• Language: Java
• Homepage: http://jgillam.github.io/burp-paramalyzer/
• Size: 5.28 MB
• Stars: 153
• Watchers: 11
• Forks: 26
• Open Issues: 11
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-burp-extensions - Paramalyzer - Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests. (Vulnerability Specific Extensions / Broken Access Control)
• awesome-hacking-lists - JGillam/burp-paramalyzer - Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests. (Java)

README

        
# burp-paramalyzer

## Description

The purpose of this extension is to improve efficiency of manual parameter analysis for web penetration tests of either complex or numerous applications.  This can assist in tasks such as identifying sensitive data, identifying hash algorithms, decoding parameters, and determining which parameters are reflected in the response.

## Docs

[Read the docs](https://jgillam.github.io/burp-paramalyzer/)

## Issues and Enhancements

Use the Issues tab above to report any problems or enhancement requests.

_Note: You must install Burp Suite (either the community or pro version) first.  Then download the latest burp-paramalyzer release (.jar file) and install it through the Burp Extender tab._

## Development Notes

This project was built using IntelliJ IDEA and uses a Gradle build (as per Portswiggers requirements for BAppStore integration).

Assuming you are bringing this into IntelliJ to work on it, you should be able to build using the Gradle `burp-paramalyzer[fatJar]` target.

However, if you make significant changes through the UI designer, it may be necessary to run a build from the project menu (`Ctrl-F9`) to regenerate the UI component code. It may also be necessary to run this twice (you will know when you see errors about things it can't seem to find). Once the UI designer code is regenerated, you can go back to using the Gradle fatJar target.