forked from elespike/burp-cph
-
Notifications
You must be signed in to change notification settings - Fork 3
/
CPH_Help.py
112 lines (102 loc) · 5.18 KB
/
CPH_Help.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
from collections import namedtuple
class CPH_Help:
quickstart = """<html>
<strong>The quicksave and quickload functionality (see buttons above) persist through<br>
reloading not only the extension, but Burp Suite entirely. All values of each existing<br>
configuration tab will be saved, along with the order of all tabs.<br>
<br>
Use the Export/Import Config buttons to save/load your current configuration to/from a JSON file.<br></strong>
<br>
<h2>Adding configuration tabs</h2>
- Click '+' to add an empty tab; or<br>
- Select one or many requests from anywhere in Burp, right-click, and choose 'Send to CPH'.<br>
This will create as many tabs as the number of selected requests, and populate each tab<br>
with each selected request to be issued for parameter extraction from its response.<br>
<br>
<h2>Enabling/Disabling configuration tabs</h2>
Simply click the checkbox next to the tab's name.<br>
New tabs are enabled by default but require a valid configuration in order to have any effect.<br>
<br>
<h2>Tab order</h2>
Leftmost tabs will be processed first; therefore, tab order may be important,<br>
especially when extracting values from cached responses.<br>
Please visit the Wiki to learn more about utilizing cached responses.<br>
</html>"""
HelpPopup = namedtuple('HelpPopup', 'title, message, url')
indices = HelpPopup(
'Targeting a subset of matches',
"""<html>
To target a specific subset of matches,<br>
enter comma-separated indices and/or slices, such as:<br>
0,3,5,7 - targets the 1st, 4th, 6th and 8th matches<br>
0:7 - targets the first 7 matches but not the 8th match<br>
0:7,9 - targets the first 7 matches and the 10th match<br>
-1,-2 - targets the last and penultimate matches<br>
0:-1 - targets all but the last match
</html>""",
'https://github.com/elespike/burp-cph/wiki/04.-Targeting-matches'
)
named_groups = HelpPopup(
'Inserting a dynamic value using named groups',
"""<html>
In the expression field shown in step 4,<br>
define named groups for values you wish to extract<br>
from the appropriate response.<br>
<br>
For example, (?P<mygroup>[Ss]ome.[Rr]eg[Ee]x)<br>
<br>
Then, in the expression field shown in step 3,<br>
ensure that the RegEx box is selected,<br>
and use named group references to access your extracted values.<br>
<br>
In line with the above example, \\g<mygroup>
</html>""",
'https://github.com/elespike/burp-cph/wiki/05.-Issuing-a-separate-request-to-use-a-dynamic-value-from-its-response'
)
extract_single = HelpPopup(
'Extracting a value after issuing a request',
"""<html>
To replace your target match(es) with a value<br>
or append a value to your target match(es) when<br>
that value depends on another request to be issued,<br>
set up the request on the left pane and craft a RegEx<br>
to extract the desired value from its response.<br>
<br>
The <b>Issue</b> button may be used to test the request,<br>
helping ensure a proper response.
</html>""",
'https://github.com/elespike/burp-cph/wiki/05.-Issuing-a-separate-request-to-use-a-dynamic-value-from-its-response'
)
extract_macro = HelpPopup(
'Extracting a value after issuing sequential requests',
"""<html>
To replace your target match(es) with a value<br>
or append a value to your target match(es) when<br>
that value depends on sequential requests to be issued,<br>
set up a Burp Suite Macro and invoke the CPH handler<br>
from the Macro's associated Session Handling Rule.<br>
<br>
Finally, craft a RegEx to extract the desired value<br>
from the final Macro response.
</html>""",
'https://github.com/elespike/burp-cph/wiki/07.-Extracting-replace-value-from-final-macro-response'
)
extract_cached = HelpPopup(
'Extracting a value from a previous tab',
"""<html>
To replace your target match(es) with a value<br>
or append a value to your target match(es) when<br>
that value has been cached by a previous CPH tab,<br>
simply select the desired tab from the dynamic drop-down.<br>
<i>NOTE: If the desired tab is not in the drop-down, ensure<br>
that the tab has seen its request at least once.</i><br>
<br>
Then, craft a RegEx to extract the desired value<br>
from the selected tab's cached response.<br>
Note that disabled tabs will still cache HTTP messages<br>
and therefore can be used as a mechanism for value extraction.
</html>""",
'https://github.com/elespike/burp-cph/wiki/08.-Utilizing-cached-responses'
)
def __init__(self):
pass