https://github.com/x41sec/BeanStack

X41 BeanStack - Stack Trace Fingerprinting BETA
https://github.com/x41sec/BeanStack

Last synced: 2 months ago
JSON representation

X41 BeanStack - Stack Trace Fingerprinting BETA

• Host: GitHub
• URL: https://github.com/x41sec/BeanStack
• Owner: x41sec
• License: apache-2.0
• Created: 2019-03-21T10:32:04.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2020-11-04T18:05:38.000Z (about 4 years ago)
• Last Synced: 2024-08-02T00:23:04.594Z (6 months ago)
• Language: Java
• Homepage: https://beanstack.io
• Size: 709 KB
• Stars: 52
• Watchers: 3
• Forks: 7
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-burp-extensions - BeanStack - Stack-trace Fingerprinter - Java Fingerprinting using Stack Traces. Note that this extension sends potentially private stack-traces to a third party for processing. (Vulnerability Specific Extensions / Sensitive Data Exposure)

README

        
# X41 BeanStack (beta)

*Java Fingerprinting using Stack Traces*

## Installing the Burp Extension

The easiest way is to download *BeanStack* from the BApp Store, which can be found in your Burp Suite under the Extender tab.

Alternatively, you can download [the latest release](https://github.com/x41sec/BeanStack/releases/latest)

from this GitHub repository, or use your own build from `build/libs/beanstack.jar`. To install the jar:

1. Launch Burp

1. Create a temporary project or select a new/existing one

1. Open the Extender tab

1. Open the Extensions subtab

1. Click the Add button

1. Select the `jar` file

1. Leave all options as default, click "next", and finish the wizard



## Extension Usage

Browse to a website with a nice stack trace (such as [beanstack.io](https://beanstack.io))

and make sure the response passes through the Burp proxy. It should

automatically be picked up, query the API (in the background), and produce an

"Issue" in the Dashboard or Target tab.



## Building From Source

Dependencies:

    apt install gradle default-jdk-headless

Note that for ancient versions of Gradle (pre-3.4, Feb 2017), you will need to

remove the bottom paragraph from `build.gradle`. Your version of Gradle cannot

produce reproducible builds.

Build:

    make