Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/P3GLEG/PwnBack
Burp Extender plugin that generates a sitemap of a website using Wayback Machine
https://github.com/P3GLEG/PwnBack
burp burp-extensions burpsuite information-retrieval osint security-tools
Last synced: about 1 month ago
JSON representation
Burp Extender plugin that generates a sitemap of a website using Wayback Machine
- Host: GitHub
- URL: https://github.com/P3GLEG/PwnBack
- Owner: P3GLEG
- License: mit
- Created: 2017-03-31T19:54:27.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2018-05-08T16:52:22.000Z (over 6 years ago)
- Last Synced: 2024-08-02T00:23:02.104Z (4 months ago)
- Topics: burp, burp-extensions, burpsuite, information-retrieval, osint, security-tools
- Language: Java
- Homepage:
- Size: 56.6 KB
- Stars: 226
- Watchers: 13
- Forks: 42
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
- awesome-burp-extensions - PwnBack/Wayback Machine - Burp Extender plugin that generates a sitemap of a website using Wayback Machine. (Information Gathering)
README
# PwnBack
## Getting Started
PwnBack requires PhantomJS to run. You can download it from [here](http://phantomjs.org/)
To understand why it is required currently see the section [PhantomsJS](###PhantomJS)
The plugin has several settings that a user can define depending on their hardware setup.
* # of PhantomJS WebDrivers
- The number of Firefox headless browsers to open. Be mindful of Burp Suite's memory settings
* # of HTTP Response Parsers
- These are responsible for parsing requests generated by the WebDriver. You may gain very little by increasing this number.
* Start Year
- How far back in a Website's history you'd like to traverse
* End Year
- When to stop looking at a Website's History
* PhantomJS Location
- The location of the PhantomJS binary
* Output Folder
- Where to save results when the Export Results button is pressed
* Domain
- The domain name to crawl. example.com, example.org, etc.
* CA Bundle
- The CA certificate you wish to use for PhantomJS. You shouldn't need this, however, check
Troubleshooting if no traffic is being generated
### Installing
In BurpSuite open the Extender Tab
Click the Add button
Locate the jar file included in this repo.
The current version of is v1.7.21, I am unable to guarantee backward support.
## Build
Run the following commands
```bash
git clone https://github.com/k4ch0w/PwnBack.git
cd PwnBack
./gradlew fatJar
```
## Authors
* **Paul Ganea** - *Initial work* - [k4ch0w](https://github.com/k4ch0w)
## License
This project is licensed under the MIT License - see the [LICENSE.md](LICENSE.md) file for details
### PhantomJS
PhantomJS is required to correctly render pages produced by archive.org.
The service uses ajax calls to render the page, so if you don't use a web driver that
supports Javascript you will only receive the way back machines toolbar.
### Troubleshooting
There is an issue with the JVM's Cert storage on certain computers and the SSL certificate provided by archive.org
If you see no traffic being generate run the following command and provide the path to the CA-Bundle
```bash
curl --remote-name --time-cond cacert.pem https://curl.haxx.se/ca/cacert.pem
```