Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/yeswehack/YesWeBurp

YesWeHack Api Extension for Burp
https://github.com/yeswehack/YesWeBurp

bugbounty burp-extensions hacking pentest tools

Last synced: about 2 months ago
JSON representation

YesWeHack Api Extension for Burp

Awesome Lists containing this project

README

        

# YesWeBurp

## Description

YesWeBurp is an extension for BurpSuite allowing you to access all your https://yeswehack.com/ bug bounty programs directly inside Burp.

YesWeBurp also help you to instantly configure Burp according to the program rules.

![](https://i.imgur.com/uzBycc6.png)
![](https://i.imgur.com/0ZELF17.png)

## Installation

### From release
- Download https://github.com/yeswehack/yesweburp/releases/latest
- Open Burp on Extender / Extensions
- Click `Add`
- Set Extension type as Java
- Set Extension file to `YesWeBurp.jar`
- Click `Next`
- The addon is now installed, a new tab named `YesWeBurp` should appear

### From source
- `git clone 'https://github.com/yeswehack/YesWeBurp.git' `
- Open the project with intellij IDEA
- Compile with ctrl+F9
- Open Burp on Extender / Extensions
- Click `Add`
- Set Extension type as Java
- Set Extension file to `/out/artifacts/YesWeBurp_jar/YesWeBurp.jar`
- Click `Next`
- The addon is now installed, a new tab named `YesWeBurp` should appear

### From BApp Store

YesWeBurp is also available on the BApp store, the BApp store version might be outdated.

## Configuration

The configuration options are available in the tab YesWeHack / Options

| option | description | default |
|--------|-------------|---------|
| Authentication | Choose between Anonymous or authenticated connection.
Authenticated mode allows you to access all you private programs. | Anonymous |
| Email | Email used for connecting to your YesWeHack account. | - |
| Password | Password used for connecting to your YesWeHack account. | - |
| OTP | OTP token used for connecting to your YesWeHack account (ex: 000000). | - |
| Remember password | Choose to keep a plaintext copy of your password inside Burp settings | - |

## Changelog
- v2.0.2 - Change in yeswehack api
- v2.0.1 - Fixed html rendering
- v2.0.0
- Total rewrite in Kotlin
- Allow preview of scopes rules
- Programs are now cached for the session
- Better Faster Stronger
- v1.0.2 - Basic support for TOTP
- v1.0.1 - Bugfix
- v1.0.0 - Initial release