burp 日志插件从原理到实践

package burp;
import loggerplusplus.LoggerPlusPlus;

public class BurpExtender extends LoggerPlusPlus{  public static void main(String [] args){    System.out.println("You have built the Logger++. You shall play with the jar file now!");  }}

    @Override    public void registerExtenderCallbacks(final IBurpExtenderCallbacks callbacks){        //Burp Specific        LoggerPlusPlus.callbacks = callbacks;        LoggerPlusPlus.instance = this;        LoggerPlusPlus.contextMenuFactory = new LoggerContextMenuFactory();
        callbacks.setExtensionName("Logger++");
        filterListeners = new ArrayList<>();        loggerPreferences = new LoggerPreferences(LoggerPlusPlus.this);        logManager = new LogManager(loggerPreferences);        elasticSearchLogger = new ElasticSearchLogger(logManager, loggerPreferences);
        if(!callbacks.isExtensionBapp() && loggerPreferences.checkUpdatesOnStartup()){            MoreHelp.checkForUpdate(false);        }
        buildUI();    }

    @Override    public void processHttpMessage(final int toolFlag, final boolean messageIsRequest, final IHttpRequestResponse requestResponse) {        // Only process scanner messages which contain the request and response.        if(!messageIsRequest) {            final LogEntry logEntry = new LogEntry();            processHttpMessage(logEntry, toolFlag, requestResponse);        }    }
    // Wrapper to allow a custom LogEntry to be passed as a parameter    // Custom LogEntry used when importing proxy history.    // messageIsRequest is removed as not needed.    public void processHttpMessage(final LogEntry logEntry, final int toolFlag, final IHttpRequestResponse requestResponse){        executorService.submit(new Runnable() {            @Override            public void run() {                if(toolFlag != IBurpExtenderCallbacks.TOOL_PROXY || logEntry.isImported){                    if(requestResponse == null || !prefs.isEnabled()) return;                                        IRequestInfo analyzedReq = LoggerPlusPlus.getCallbacks().getHelpers().analyzeRequest(requestResponse);                    URL uUrl = analyzedReq.getUrl();                                        if (isValidTool(toolFlag) && (!prefs.isRestrictedToScope() || LoggerPlusPlus.getCallbacks().isInScope(uUrl))){                        // We will not need to change messageInfo so save to temp file                        IHttpRequestResponse savedReqResp = LoggerPlusPlus.getCallbacks().saveBuffersToTempFiles(requestResponse);                        logEntry.processRequest(toolFlag, savedReqResp, uUrl, analyzedReq, null);                        if(requestResponse.getResponse() != null) logEntry.processResponse(savedReqResp);                        // Check entry against colorfilters.                        for (ColorFilter colorFilter : prefs.getColorFilters().values()) {                            logEntry.testColorFilter(colorFilter, false);                        }
                        addNewRequest(logEntry, true); // Complete Request and Response Added                        for (LogEntryListener logEntryListener : logEntryListeners) {                            logEntryListener.onResponseUpdated(logEntry);                        }                    }                }            }        });    }
    @Override    public void processProxyMessage(final boolean messageIsRequest, final IInterceptedProxyMessage proxyMessage) {        //REQUEST AND RESPONSE SEPARATE        final LogEntry.PendingRequestEntry logEntry;        if(messageIsRequest){            logEntry = new LogEntry.PendingRequestEntry();        }else{            synchronized (pendingRequests) {                logEntry = pendingRequests.remove(proxyMessage.getMessageReference());            }        }        executorService.submit(new Runnable() {            @Override            public void run() {                if(proxyMessage == null || !prefs.isEnabled()) return;                IHttpRequestResponse requestResponse = proxyMessage.getMessageInfo();                IRequestInfo analyzedReq = LoggerPlusPlus.getCallbacks().getHelpers().analyzeRequest(requestResponse);                URL uUrl = analyzedReq.getUrl();                int toolFlag = LoggerPlusPlus.getCallbacks().TOOL_PROXY;                if (isValidTool(toolFlag) && (!prefs.isRestrictedToScope() || LoggerPlusPlus.getCallbacks().isInScope(uUrl))){                    if(messageIsRequest){                        //New Proxy Request                        //We need to change messageInfo when we get a response so do not save to buffers                        logEntry.processRequest(toolFlag, requestResponse, uUrl, analyzedReq, proxyMessage);                        for (ColorFilter colorFilter : prefs.getColorFilters().values()) {                            logEntry.testColorFilter(colorFilter, false);                        }                        synchronized (pendingRequests) {                            pendingRequests.put(proxyMessage.getMessageReference(), logEntry);                        }                        addNewRequest(logEntry, false); // Request added without response                    }else{                        // Existing Proxy Request, update existing                        if (logEntry != null) {                            updatePendingRequest(logEntry, requestResponse);                        } else {                            lateResponses++;                            if(totalRequests > 100 && ((float)lateResponses)/totalRequests > 0.17){                                MoreHelp.showWarningMessage(lateResponses + " responses have been delivered after the Logger++ timeout. Consider increasing this value.");                                //Reset late responses to prevent message being displayed again so soon.                                lateResponses = 0;                            }                        }                    }                }            }        });    }