Getting started with Burp Suite extension_Getting started with Burp Suite extension.png

EducativeDockerBurpV2.tar.gz

BurpSuiteCommunityBuildTheJarV4

This course is for folks who are new to security, are experts already, or are just curious. We will learn how to build Burp Suite extension plugins with a focus on development using IntelliJ & Java.

You will be able to build Burp Suite Extension Plugins from scratch with live development and testing in Java by the end of the course. These projects will be useful learning experiences for both web application security specialists and developers. This course assumes a rudimentary understanding of Burp Suite as well as basic object-oriented programming experience.

Burp Suite Extension Development

# Running extensions in the WYSIWIG environment


First, we need to build a JAR file of the code that we have written for Burp Suite Extension. Follow the commands below to create the JAR file from code that will be writing in an online IDE. Always remember the online IDE code will be available in the `/usercode` directory.

```bash
## Change directory to /usercode
cd usercode

## remove the existing build folder if any
## build will contain your compiled classes
[ -d build ] && rm -rf build
mkdir build

## remove the existing bin folder if any
## bin will contain your JAR file
[ -d bin ] && rm -rf bin
mkdir bin

## compile the *.java file to *.class file
javac -d build src/burp/*.java

## create Jar archive which will be loaded in the Burp environment
jar cf bin/BurpExtenderOutput.jar -C build burp 

## If everything goes well, the output JAR file will be /usercode/bin directory.
```

* Go to the loaded Burp Suite environment in the "Output" tab or the link provided in the Online IDE.
* Go to the "Extender" tab.
* Click on "Add".
* In Extension Details, select Java (Python or Ruby) in Extension Type and fetch the JAR file from the `/usercode/bin` directory.
* Click "Ok".

The extension will now become functional. Let's try this in the next lesson.


This lesson will provide an introduction to how the WYSIWYG Development Environment works.

__default

Knowing WYSIWYG Environment

Running extensions in the WYSIWIG environment