Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/dnet/burp-gwt-wrapper

Burp Suite GWT wrapper
https://github.com/dnet/burp-gwt-wrapper

Last synced: about 1 month ago
JSON representation

Burp Suite GWT wrapper

Awesome Lists containing this project

README

        

Burp Suite GWT wrapper
======================

Usage
-----

- Install dependencies listed below.
- Start the service by entering `python burp_gwt_wrapper.py` in a terminal.
- Save the request(s) you'd like to scan in Burp Suite to XML files in the same directory as `burp_gwt_wrapper.py`.
- Open http://localhost:5000/ in a browser.
- Select the XML file and the request you'd like to scan.
- Use your favorite tool (intuition, Burp Suite Scanner, sqlmap, etc.) to scan the service.

Dependencies
------------

- Python 2.5+ (tested on Python 2.7.3)
- `gwtparse` from https://github.com/GDSSecurity/GWT-Penetration-Testing-Toolset
- Flask (Debian/Ubuntu package: `python-flask`)
- Requests (Debian/Ubuntu package: `python-requests`)
- LXML (Debian/Ubuntu package: `python-lxml`)

License
-------

The whole project is available under MIT license.

Known limitations
-----------------

- GWT RPC protocol support depends on `gwtparse`, so version 6 works, but for everything else YMMV