Skip to content

Conversation

@GangGreenTemperTatum
Copy link
Collaborator

@GangGreenTemperTatum GangGreenTemperTatum commented Jan 15, 2025

🏴‍☠️ Burpference

closes #10

Scanner Enhancement for burpference

This PR adds a new scanner functionality to burpference that allows targeted security analysis of specific domains and URLs.

Features Added

  • New Scanner tab with custom analysis capabilities
  • Support for direct URL analysis and OpenAPI specification scanning
  • Custom prompt input for tailored security assessments
  • Background thread processing to keep UI responsive
  • Debug logging for configuration and API adapter issues
  • Automatic configuration loading on startup
  • Integration with existing API adapters

Technical Changes

  • Added BurpferenceScanner class to handle dedicated scanning functionality
  • Enhanced configuration management to properly sync between main extension and scanner
  • Added security header analysis for URL scanning
  • Improved error handling and user feedback
  • Added debug logging for troubleshooting

Testing

The scanner has been tested with:

  • Direct URL analysis
  • OpenAPI specification scanning
  • Custom prompt inputs
  • Various API configurations

simple PoC:

image image image

@GangGreenTemperTatum GangGreenTemperTatum merged commit c5afa88 into main Jan 16, 2025
1 check passed
@GangGreenTemperTatum GangGreenTemperTatum deleted the ads/eng-685-burpference-add-custom-api-scanner-using-inference branch January 16, 2025 01:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FEATURE] Burpference custom scanner v1

2 participants