Protobuf Magic is an advanced extension for Burp Suite designed to intuitively handle Protobuf (Protocol Buffers) messages, even in the absence of complete .proto definitions. If you're familiar with tools like InQL, imagine that capability fine-tuned exclusively for Protobuf data.
- Protobuf Analysis: Seamlessly interpret incoming Protobuf messages within Burp Suite's Proxy, Repeater, or Intruder, converting them into a format you can easily comprehend, all without needing the original .proto files.
- Message Modification: Freely adjust the Protobuf message contents. Test a variety of scenarios and edge cases without the hassle of meddling with .proto files.
- Message Dispatch: Dispatch altered Protobuf messages straight from Burp Suite towards your desired target—a vital toolset for assessing Protobuf-integrated APIs and software.
- JSON to Protobuf Serialization: Furnish a JSON payload within Intruder, and let the extension convert it to Protobuf right before dispatching the request.
- Grab the freshest release right here.
- Journey to the "Extender" segment in Burp Suite. Hit "Add" inside the "Extensions" panel.
- Opt for the JAR file you've just downloaded and proceed with "Next."
- Voilà! Protobuf Magic integrates seamlessly into your Burp Suite, ready for action.
- Post-installation, commence traffic interception that encompasses Protobuf messages via Proxy, Repeater, or Intruder.
- Protobuf Magic springs into action, identifying and breaking down Protobuf messages within request and response data.
- Within Proxy and Repeater, edit the Protobuf message content before relaying it server-wards.
- "Send to Intruder" pushes your Protobuf message towards Intruder, primed for thorough testing or fuzzing.
- For JSON to Protobuf in Intruder: Transfer your chosen JSON content into the body request portion of Intruder. The extension ensures JSON is molded into Protobuf before transmission.
📹 Visual Learners, Rejoice! Dive into our Video Guide:
- Despite its prowess, Protobuf Magic might occasionally stumble upon intricate Protobuf constructs if the core .proto definitions are out of reach. Consequently, certain nested or bespoke types might not render flawlessly.
- Tweaking Protobuf messages sans a precise message blueprint could culminate in distorted or erroneous server-bound dispatches.
Protobuf Magic graces the open-source community under the umbrella of the GNU License. Dive deeper into our LICENSE for an in-depth look.