/Elasticburp-NG

ElasticBurp-NG

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

Installation

  1. Install ElasticSearch and Kibana on your server.

  • set the following options in /etc/elasticsearch/elasticsearch.yml to allow connection to ElasticSearch from LAN:
    discovery.type: single-node
    network.host: 0.0.0.0

  • or install with docker

    docker-compose up -d

  1. Install Jython.

image

  1. Install ElasticBurp via the BApp Store feature in the Burp Extender tool.
3.mp4
  1. Find ElasticBurp's directory.
  • Window: %appdata%\BurpSuite\bapps\67f5c31f93d04ad3a3b0a1808b3648fa\
  • Linux: /home/{user}/.BurpSuite/bapps/67f5c31f93d04ad3a3b0a1808b3648fa/
  1. Overwrite ElasticBurp-NG's files to the original ElasticBurp's directory. To get our files, you can clone this repository (recommend this for future updates) or download a zip file.
  • Window:
5.mp4
  • Linux:
5_2.mp4
  1. Reactive ElasticBurp and set your 'ElasticSearch Host' and 'ElasticSearch Index' in the ElasticBurp Tab and then check the Output Log to confirm your connection.
6.mp4
  1. Enjoy!

Features

  • Requests Sharing

Make it easier to share any request with your teammate using a hash.

  • Advanced Search

Advanced Search using KQL(Kibana Query Language) but you need to install QueryBuilderApi plugin on Kibana.

  • Reduce duplicated requests

  • Gf-Pattern

  • Gen Word-list

Using Redis to reduce duplicated requests and improve performance

Demo

demo.mp4

Tested on

ElasticSearch 7.17.5
Redis 5.0.14.1
Redis 3.0.504

Change Log

Todo

  • Reduce duplicated requests.
  • Requests Sharing.
  • Advanced Search.
  • Gf-Pattern.
  • Gen Word-list.
  • Reduce missing requests from ConnectionTimeout.