Confused with profiles

[ohmer1]

Hello,

Sorry if this is a dummy question, but I wonder, what's the use case for this task? It create a "lnxsrv profile" file in /etc/burp/clientconfdir/profiles but I fail to see where and how it's used. I see there is also /etc/burp/clientconfdir/incexc/profile_lnxsrv. Here I understand it allow to define a profile to a client that share a similar configuration. Are they related? Why a profile would contain a client password ?

Thank you!

[pablodav]

Sorry for my late reply, I will try to check for. Better clarification tomorrow. In advance, one is for a burp incexc profile and the other is more like as a template to be used when creating a new client. I will try to make it more clear. El jue, 12 de ene. de 2023 19:45, ohmer1 ***@***.***> escribió:

…

Hello, Sorry if this is a dummy question, but I wonder, what's the use case for this task <https://github.com/CoffeeITWorks/ansible_burp2_server/blob/master/tasks/4_config_burp.yml#L78>? It create a "lnxsrv profile" file in /etc/burp/clientconfdir/profiles but I fail to see where and how it's used. I see there is also /etc/burp/clientconfdir/incexc/profile_lnxsrv. Here I understand it allow to define a profile to a client that share a similar configuration. Are they related? Why a profile would contain a client password ? Thank you! — Reply to this email directly, view it on GitHub <#90>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABCA7H55IA2VRMQ7OIDA4QLWSCCQDANCNFSM6AAAAAATZYTA3I> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[ohmer1]

Hello,

Yes I also thought that the file in the clientconfdir/profiles directory was a client template, but it doesn't appear to be used anywhere if I understand correctly. Maybe the idea was to include that file in the profiles_templates.content variable, but a static password for all clients that share the same profile would not make sense.

Thank you!

[pablodav]

Yes Ohmer! thanks you for raising this up.

The idea looks very old and deprecated, I'm pretty sure I don't use it at all on my servers but I will have to review all the deploys before cleaning this up.

I will keep it open to remmember to cleanup it.