https://github.com/putsi/privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
https://github.com/putsi/privatecollaborator

bugbounty burp burpsuite burpsuitepro collaborator penetration-testing penetration-testing-tools

Last synced: 24 days ago
JSON representation

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

• Host: GitHub
• URL: https://github.com/putsi/privatecollaborator
• Owner: putsi
• License: mit
• Created: 2019-05-23T20:21:56.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2024-06-25T14:53:19.000Z (6 months ago)
• Last Synced: 2024-08-03T23:03:31.153Z (4 months ago)
• Topics: bugbounty, burp, burpsuite, burpsuitepro, collaborator, penetration-testing, penetration-testing-tools
• Language: Shell
• Homepage: https://teamrot.fi/2019/05/23/self-hosted-burp-collaborator-with-custom-domain/
• Size: 31.3 KB
• Stars: 203
• Watchers: 4
• Forks: 47
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-burp-suite - **32**星 - certificate (<a id="e0b6358d9096e96238b76258482a1c2f"></a>Collaborator / <a id="93941e987724e5628e5c99b464df1593"></a>工具)
• awesome-hacking-lists - putsi/privatecollaborator - A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate (Shell)

README

        
# Burp Suite - Private collaborator server

A script for installing private Burp Collaborator with Let's Encrypt SSL-certificate. Requires an Ubuntu virtual machine and public IP-address.

Works for example with Ubuntu 18.04/20.04/22.10 virtual machine and with following platforms:

- Amazon AWS EC2 VM (with or without Elastic IP).

- DigitalOcean VM (with or without Floating IP).

Please see the below blog post for usage instructions:

[https://teamrot.fi/self-hosted-burp-collaborator-with-custom-domain/](https://teamrot.fi/self-hosted-burp-collaborator-with-custom-domain/)

## TL;DR:

1. Clone this repository.

2. Install Burp to /usr/local/BurpSuitePro.

3. Run `sudo ./install.sh yourdomain.fi [email protected]` (the email is for Let's Encrypt expiry notifications).

4. You should now have Let's encrypt certificate for the domain and a private burp collaborator properly set up.

5. Start the collaborator with `sudo service burpcollaborator start`.

6. Configure your Burp Suite Professional to use it.

7. ????

8. Profit.

### Important note:

As stated in [the blog post](https://teamrot.fi/self-hosted-burp-collaborator-with-custom-domain/), be sure to firewall the ports 9443 and 9090 properly to allow connections only from your own Burp Suite computer IP address. Otherwise everyone in the internet can use your collaborator server!