Thanks to a new bootstrap mechanism, burp-rest-api is loaded as a 2nd generation extension which makes it possible to load both custom and BAppStore extensions written in any of the supported programming languages. Many users have asked for the ability to load additional extensions while running Burp with burp-rest-api. By re-engineering the way burp-rest-api starts, it is now possible to build the extension without even having burpsuite_pro.jar. Until now, burp-rest-api was strictly dependent on the original Burp Suite JAR to be compiled, hence we weren’t able to create stable releases due to licensing. While this may not sound like a big deal, it’s actually the result of a major change in the plugin bootstrap mechanism. You can now download the latest version of burp-rest-api from in a precompiled release build. In this blog post, we would like to summarize some of the improvements. We believe that working together on foundational components, such as burp-rest-api, represents the future of security automation as it empowers companies of any size to build customized solutions.Īfter a few weeks of work, we cleaned up all the open issues and brought burp-rest-api to its next phase.
Unfortunately internal security tools are rarely open-sourced, and still, too many companies are reinventing the wheel. After several years of experience in big tech companies and startups, we understand the need for security automation to improve efficacy and efficiency during software security activities. Starting in June 2018, Doyensec joined VMware in the development and support of the growing burp-rest-api community. Today, we’re proud to announce a new major release of the tool: burp-rest-api v2.0.1 Many security professionals and organizations have relied on this extension to orchestrate the work of Burp Spider and Scanner. Since the first commit back in 2016, burp-rest-api has been the default tool for BurpSuite-powered web scanning automation. Introducing burp-rest-api v2 - Posted by Luca Carettoni
0 kommentar(er)
