https://github.com/adeadfed/pwnfox-for-chromium
A BurpSuite extension that allows you to use Chromium with PwnFox
https://github.com/adeadfed/pwnfox-for-chromium
bugbounty burpsuite chromium hacking webhacking
Last synced: about 1 year ago
JSON representation
A BurpSuite extension that allows you to use Chromium with PwnFox
- Host: GitHub
- URL: https://github.com/adeadfed/pwnfox-for-chromium
- Owner: adeadfed
- License: mit
- Created: 2024-09-07T19:49:34.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-03-02T09:10:57.000Z (over 1 year ago)
- Last Synced: 2025-03-23T20:37:15.521Z (about 1 year ago)
- Topics: bugbounty, burpsuite, chromium, hacking, webhacking
- Language: Java
- Homepage:
- Size: 10.4 MB
- Stars: 10
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# PwnFox For Chromium
PwnFox For Chromium is a combination of a BurpSuite and browser addons that ports the functionality of the popular [PwnFox](https://github.com/yeswehack/PwnFox) BurpSuite extension directly to your Chromium.
PwnFox For Chromium allows you to:
- Set up Chromium to fully work with BurpSuite's proxy in a couple of clicks
- Launch Chromium directly from BurpSuite
- Manage 8 separate Chromium user profiles for the ease of multi-account testing
- Clearly distinguish between user profiles through unique Chromium themes and color-coded HTTP traffic in the Proxy tab
- Extension settings persist between different sessions and only have to be configured once
- Works on Unix, MacOS and Windows
## Setup
1. Download the up-to-date `PwnFox-For-Chromium.jar` from the [Releases](https://github.com/adeadfed/PwnFox-For-Chromium/releases) tab
2. Import the PwnFox For Chromium JAR into the BurpSuite
3. Navigate to the new extension tab and configure the settings below
- Set the Chromium path to a valid executable. BurpSuite is shipped with an embedded Chromium in the `burpbrowser` folder; you can lookup the location of your Burp Browser below ([## Burp Browser location](#burp-browser-location))
- *Optionally* set your desired profile data directory to keep your work on different projects separated
4. Launch the configured Chromium right from the BurpSuite and enjoy!
## Burp Browser location
You can use Burp's built-in browser to deploy PwnFox for Chromium. Here are the common locations of Burp's Chrome executable:
### Windows
```
~\AppData\Local\Programs\BurpSuiteCommunity\burpbrowser\{VERSION}\chrome.exe
~\AppData\Local\Programs\BurpSuitePro\burpbrowser\{VERSION}\chrome.exe
```
### Linux
```
# kali installation
~/.BurpSuite/burpbrowser/{VERSION}/chrome
# official PortSwigger installers
~/BurpSuitePro/burpbrowser/{VERSION}/chrome
~/BurpSuiteCommunity/burpbrowser/{VERSION}/chrome
```
### MacOS
```
/Applications/Burp Suite Community Edition.app/Contents/Resources/app/burpbrowser/{VERSION}/Chromium.app/Contents/MacOS/Chromium
/Applications/Burp Suite Community Professional.app/Contents/Resources/app/burpbrowser/{VERSION}/Chromium.app/Contents/MacOS/Chromium
```
## Compiling the extension on your own with Maven
```
git clone https://github.com/adeadfed/PwnFox-For-Chromium
cd PwnFox-For-Chromium/burp
mvn clean compile assembly:single
ls -l target/PwnFox-For-Chromium*.jar
```
## Proxy configuration
You can edit Chromium proxy configuration and enable/disable it using the built-in Proxy Settings Editor Chromium extension
## Why this instead of [autochrome](https://github.com/nccgroup/autochrome)?
- You don't need to download a separate Chromium browser for this extension. You can reuse the already existing Chrome/Chromium installation on your PC, or, even better, use the Chromium bundled with BurpSuite!
- All dependencies are shipped in a single JAR file
- The traffic will be color-coded in the Proxy tab exactly like in the [PwnFox](https://github.com/yeswehack/PwnFox) BurpSuite plugin
- All extension settings can be managed in BurpSuite directly
- Additional options for proxy configuration in the bundled Chromium extensions
- You can keep unique Chromium data for each engagement by separating the Chromium profile data directories