https://github.com/nchgroup/burp2telegram

Push notifications to Telegram bot on BurpSuite response conditions.
https://github.com/nchgroup/burp2telegram

burpsuite burpsuite-extender pentesting telegram telegram-bot

Last synced: about 1 year ago
JSON representation

Push notifications to Telegram bot on BurpSuite response conditions.

• Host: GitHub
• URL: https://github.com/nchgroup/burp2telegram
• Owner: nchgroup
• License: mit
• Created: 2022-06-13T23:09:33.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2022-07-07T04:25:43.000Z (almost 4 years ago)
• Last Synced: 2025-05-08T00:47:23.233Z (about 1 year ago)
• Topics: burpsuite, burpsuite-extender, pentesting, telegram, telegram-bot
• Language: Java
• Homepage:
• Size: 328 KB
• Stars: 7
• Watchers: 1
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          


 
Burp to Telegram

 

 




## Burp to Telegram view

![](media/example_burp2telegram.png)

## Telegram chat view

![](media/match_telegram.png)



Push notifications to Telegram bot on BurpSuite response conditions.


### Burp to Telegram

Burp2Telegram extension matches all BurpSuite traffics (Intruder, Repeater, Proxy and Scanner) based on "any" of the user input conditions such as, 

- If the input string exists in the response body

- If the input string exists in the response headers

- If the response content-length is (equal, greater than, less than or doesn't equal) the user input content length

- If the input status code matches the response one.

When one of the above conditions met, then it pushes a notification to either a Telegram bot. The notification message is customized and can be edited/formatted by the user to get the met "condition/s" and/or the HTTP response body that includes the conditions. 

### Main Features

* Poll Notifications every X seconds.

* Customize your notification using {{FOUND}} which is your input condition and {{BODY}} which returns response body.

* Match response body, HTTP headers, content length and HTTP status code.

* Use the logical operators !, =, < and > in the content length field.

* Match Burp proxy, Repeater, Intruder and Scanner/Spider.

#### Build the Project

Use the following command to build the Jar file.

> mvn clean install

#### TODO:

    - [ ] (Regex/case sensitive/negative search) body response

    - [ ] Match more options 

    - [ ] interact.sh to Telegram

    - [ ] Support both Telegram webhook and custom HTTP listeners.

#### Bugs / Feedback / PRs

Any comment, issue or pull request will be highly appreciated :)

#### Author

- Vay3t - https://twitter.com/vay3t - https://gitlab.com/vay3t

- Gonzalo - https://twitter.com/pwner666 - https://gitlab.com/gvillegas

#### Based by: 

b1twis3 - https://github.com/Leoid - https://github.com/PortSwigger/burp-2-slack