Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

feat: burpference recon scanner for remote domains #11

Conversation

GangGreenTemperTatum
Copy link
Collaborator

@GangGreenTemperTatum GangGreenTemperTatum commented Jan 15, 2025

🏴‍☠️ Burpference

closes #10

Scanner Enhancement for burpference

This PR adds a new scanner functionality to burpference that allows targeted security analysis of specific domains and URLs.

Features Added

  • New Scanner tab with custom analysis capabilities
  • Support for direct URL analysis and OpenAPI specification scanning
  • Custom prompt input for tailored security assessments
  • Background thread processing to keep UI responsive
  • Debug logging for configuration and API adapter issues
  • Automatic configuration loading on startup
  • Integration with existing API adapters

Technical Changes

  • Added BurpferenceScanner class to handle dedicated scanning functionality
  • Enhanced configuration management to properly sync between main extension and scanner
  • Added security header analysis for URL scanning
  • Improved error handling and user feedback
  • Added debug logging for troubleshooting

Testing

The scanner has been tested with:

  • Direct URL analysis
  • OpenAPI specification scanning
  • Custom prompt inputs
  • Various API configurations

simple PoC:

image image image

@GangGreenTemperTatum GangGreenTemperTatum merged commit c5afa88 into main Jan 16, 2025
1 check passed
@GangGreenTemperTatum GangGreenTemperTatum deleted the ads/eng-685-burpference-add-custom-api-scanner-using-inference branch January 16, 2025 01:00
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[FEATURE] Burpference custom scanner v1
1 participant