Building BurpSuite Extensions

Running tools through BurpSuite proxy

Medium
20 min

Many tools support either directly or can be built to support the use of proxies. It is good to remember that BurpSuite is ultimately just a proxy, since a browser does send all traffic through BurpSuite. That means, we can also do this with any other tool.

For example, the ffuf tool:

ffuf -x http://burpsuite:8080/

The following example works with the SQLMap tool and can help with the exercise below:

sqlmap -r request.xml --force-ssl --random-agent --proxy=http://127.0.0.1:8080/ --file-read=/etc/passwd

Exercises

Flag

Find the flag from the lab environment and enter it below.

hakatemia pro

Ready to become an ethical hacker?
Start today.

As a member of Hakatemia you get unlimited access to Hakatemia modules, exercises and tools, and you get access to the Hakatemia Discord channel where you can ask for help from both instructors and other Hakatemia members.