Sunday, 23 June 2013

-reset root password for mysql:
sudo bash 
service mysql stop 
sudo mysqld --skip-grant-tables &
mysql -u root mysql
update user set password=password('NEWPASSWORD') where user='root'; FLUSH PRIVILEGES; 
killall mysqld
service mysql start
 
 
- BurpProxy extension example:




from burp import IBurpExtender
from burp import IHttpRequestResponse
from burp import IResponseInfo
from burp import ITab
from burp import IContextMenuFactory
from burp import IContextMenuInvocation
from javax import swing
from java.awt import Dimension
from javax.swing import JMenuItem
from javax.swing import JPanel;

class BurpExtender(IBurpExtender, IContextMenuFactory, ITab):

    # define registerExtenderCallbacks: From IBurpExtender Interface
    def registerExtenderCallbacks(self, callbacks):
        self.initGui()
        # keep a reference to our callbacks object (Burp Extensibility Feature)
        self._callbacks = callbacks
        # obtain an extension helpers object (Burp Extensibility Feature)
        # http://portswigger.net/burp/extender/api/burp/IExtensionHelpers.html
        self._helpers = callbacks.getHelpers()
        # set our extension name that will display in Extender Tab
        self._callbacks.setExtensionName("Request to Code")
        # register ourselves as an HTTP listener
        callbacks.registerContextMenuFactory(self)
        callbacks.addSuiteTab(self)
        return
    def initGui(self):
        self._jPanel = JPanel()
        boxVertical = swing.Box.createVerticalBox()
        boxHorizontal = swing.Box.createHorizontalBox()
        boxHorizontal.add(swing.JLabel("Output"))
        boxVertical.add(boxHorizontal)
        boxHorizontal = swing.Box.createHorizontalBox()
        self._resultsTextArea = swing.JTextArea()
        resultsOutput = swing.JScrollPane(self._resultsTextArea)
        resultsOutput.setPreferredSize(Dimension(800,800))
        boxHorizontal.add(resultsOutput)
        boxVertical.add(boxHorizontal)
        self._jPanel.add(boxVertical)
        #self._resultsTextArea.append("test this")
    def getTabCaption(self):
        return "Request to Code"
    def getUiComponent(self):
        return self._jPanel
    def createMenuItems(self, invocation):
        menu=[]
        #print("invocationContext = "+str(invocation.getInvocationContext()))
        if ((invocation.getInvocationContext() == IContextMenuInvocation.CONTEXT_MESSAGE_VIEWER_REQUEST)|(invocation.getInvocationContext() == IContextMenuInvocation.CONTEXT_PROXY_HISTORY)):
                menu.append(JMenuItem("Convert to Python", None, actionPerformed=lambda x, inv=invocation: self.doSomething(inv)))
                menu.append(JMenuItem("Convert to Perl", None, actionPerformed=lambda x, inv=invocation: self.doSomething(inv)))
        print("I am done!")
        return menu
               
    def doSomething(self,invocation):
        print "Getting data"
        invMessage=invocation.getSelectedMessages()
        request = invMessage[0].getRequest().tostring()
        requestArray=request.split('\n')
        print requestArray
        host='_'.join(requestArray[1].split(':')[1].split('.')).strip()
        output = 'def make_request():\n    response=None\n    if(request_(response):\n        pass'
        output += '\n\n'
        output += 'def (response):\n     response = None\n    try:\n'
        output += '        req.urllib2.Request("<")'
        output = output.replace('',host)
        self._resultsTextArea.setText(output)
        for i in range (2,len(requestArray)):
            print requestArray[i]

No comments:

Post a Comment