A simple Burp Suite extension to extract datas from source code

Last update: Dec 31, 2022

Overview

DataExtractor

A simple Burp Suite extension to extract datas from source code.

Features

in scope parsing
file extensions to ignore
files exclusion based on regexp
multi tabs for multiple purpose
datas extraction based on regexp
datas exclusion based on regexp
datas export

Install

First of all, ensure you have JPython loaded and setup before installing.

clone this repository
in the Extender tab, click the button "Add"
set "Extension type" to "Python"
browse to the cloned folder and select DataExtractor.py as the "Extension file"

The extension should load and is now ready to perform a passive scan.

Screenshots

You might also like...

log4j burp scanner

log4jscanner log4j burp插件特点如下： 0x01 基于Cookie字段、XFF头字段、UA头字段发送payload 0x02 基于域名的唯一性，将host带入dnslog中插件主要识别五种形式： 1.get请求，a=1&b=2&c=3 2.post请求，a=1&b=2&c=

1 Jun 30, 2022

log4j2 passive burp rce scanning tool get post cookie full parameter recognition

log4j2_burp_scan 自用脚本log4j2 被动 burp rce扫描工具 get post cookie 全参数识别，在ceye.io api速率限制下，最大线程扫描每一个参数，记录过滤已检测地址，重复地址 token替换为你自己的http://ceye.io/ token 和域名地址

5 Dec 10, 2021

PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log

1 Jan 31, 2022

This a simple tool XSS Detection Suite for CTFs games

2 Nov 24, 2021

A DOM-based G-Suite password sprayer and user enumerator

1 Apr 7, 2022

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

The SCodeScanner stands for Source Code Scanner, where you can scan your source code files like PHP and get identify the vulnerabilities inside it. The tool can use by Pentester, Developer to quickly identify the weakness.

136 Dec 13, 2022

A tool to extract the IdP cert from vCenter backups and log in as Administrator

vCenter SAML Login Tool A tool to extract the Identity Provider (IdP) cert from vCenter backups and log in as Administrator Background Commonly, durin

343 Dec 31, 2022

Python library to remotely extract credentials on a set of hosts.

1.5k Dec 31, 2022

This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to the attack classes defined and curated malapi.io.

F2Amapper This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to

3 Sep 3, 2022

Comments

Feature request

Hi I really love this tool. But is it possible to add options like "Send to DataExtrator" so I can spicificly can resend old endpoints that I dont want to revisit.

opened by iamRjarpan 2

Releases(v1.1.0)

v1.1.0(Dec 2, 2022)

Source code(tar.gz)
Source code(zip)

Owner

Gwendal Le Coguic

Bug hunter, tool maker.

GitHub Repository

Multi Brute Force Facebook - Crack Facebook With Login - Free For Now

✭ SAKERA CRACK Made With ❤️ By Denventa, Araya, Dapunta Author: - Denventa - Araya Dev - Dapunta Khurayra X ⇨ Fitur Login [✯] Login Cookies ⇨ Ins

26 Jan 01, 2023

Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack

O365DevicePhish Microsoft365_devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script t

4 Sep 23, 2022

A Superfast SMS & Call bomber for Linux And Termux !

15 Feb 21, 2022

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities Features 1 Scan one website 2 Scan multiple websites Insta

9 Dec 30, 2022

A python module for retrieving and parsing WHOIS data

pythonwhois A WHOIS retrieval and parsing library for Python. Dependencies None! All you need is the Python standard library. Instructions The manual

384 Dec 23, 2022

Extensive Python3 network scanner, simplified.

Snake Map Extensive Python3 network scanner, simplified. _,.--. --..,_ .'`__ o `;__, `'.'. .'.'` '---'` '

4 Apr 16, 2022

Moodle community-based vulnerability scanner

badmoodle Moodle community-based vulnerability scanner Description badmoodle is an unofficial community-based vulnerability scanner for moodle that sc

11 Dec 22, 2022

Magicspoofing - A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name

A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name. This project is for educational use, we are not responsible for i

20 Dec 02, 2022

A simple Burp Suite extension to extract datas from source code

Related tags

Overview

DataExtractor

Features

Install

Screenshots

You might also like...

log4j burp scanner

log4j2 passive burp rce scanning tool get post cookie full parameter recognition

PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

This a simple tool XSS Detection Suite for CTFs games

A DOM-based G-Suite password sprayer and user enumerator

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

A tool to extract the IdP cert from vCenter backups and log in as Administrator

Python library to remotely extract credentials on a set of hosts.

This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to the attack classes defined and curated malapi.io.

Comments

Feature request

Releases(v1.1.0)

v1.1.0(Dec 2, 2022)

Owner

Gwendal Le Coguic

Multi Brute Force Facebook - Crack Facebook With Login - Free For Now

Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack

A Superfast SMS & Call bomber for Linux And Termux !

Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities

A python module for retrieving and parsing WHOIS data

Extensive Python3 network scanner, simplified.

Moodle community-based vulnerability scanner

Magicspoofing - A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name

BurpSuite Extension: Log4j2 RCE Scanner

CVE-2022-22536 - SAP memory pipes(MPI) desynchronization vulnerability CVE-2022-22536

Generates password lists/dictionaries based on keywords written in python3.

Discord Token Stealer Malware Protection

wsvuls - website vulnerability scanner detect issues [ outdated server software and insecure HTTP headers.]

The probability of having the password you want in the PassMaker is +90%!!

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

Proof of concept GnuCash Webinterface

CVE-2021-41773 Path Traversal for Apache 2.4.49

Details,PoC and patches for CVE-2021-45383 & CVE-2021-45384

Um script simples de Port Scan + DNS by Hostname

Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability