/co2

Collaborator Colorizer for Burpsuite

Primary LanguageGoMIT LicenseMIT

CO2 - Collaborator Colorizer

CO2 - Collaborator Colorizer is a simple tool to enhance Burpsuite collaborator logs. Reads input from stdin, processes it and prints it out.

example-output

News

Features

  • Amends the source IP address with the name of its resource holder (IP block owner + Country code) obtained from ip2location.io.
  • Color highlighting to look more 1337 and to replace ccze.
  • Runtime cache to minimize API calls and to identify new IPs in log (first occurence = red, cached = green).
  • Persistent IP cache stored in json, also usable as custom IP annotations.
  • Show interactions only.

Planed features

  • Parse input from locale file Just use cat to process local files.
  • Log minification for interaction polling on android phones (termux)

Usage

As ip2location.io requires and API key do not forget to export IP2LOCATION_API_KEY="YOURAPIKEYHERELOL" . You should be ok with the 30,000 form the free plan.

Usage of ./co2:
  -c string
    	JSON cache file to use. (default "cache.json")
  -i	Display lines containing interacions only.

BEFORE: Example pipeline with public collaborator and ccze

curl -sA "${USER}-curl" "http://polling.burpcollaborator.net/burpresults?biid=${BIID}" | \
tail -n 32 | grep 'IDs:' | ccze -m ansi

NOW: Example pipeline with private collaborator and co2

curl -sA "${USER}-curl" -u login:pass "https://yourcollab.pwn:1337/burp.txt?${RANDOM}" | \
tail -n 32 | co2 -i

Note : Yes, this is just a golang playground project to play with different tooling