github-starred/burp-ui
2
0
Fork 0
mirror of https://github.com/ziirish/burp-ui.git synced 2026-05-21 06:45:24 -06:00
Code Issues 1 Projects Packages Wiki Activity Actions

Merge branch 'master' into demo

Browse source
This commit is contained in:
ziirish 2016-01-08 23:39:12 +01:00
commit f1e1d96458
45 changed files with 391 additions and 84 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.editorconfig
View file

@ -22,6 +22,9 @@ indent_size = 4
[Makefile]
indent_style = tab
[*.rst]
indent_style = space
indent_size = 4
[.gitlab-ci.yml}]
indent_style = space

43
CHANGELOG.rst
View file

@ -10,30 +10,35 @@ Current
- Add percent done in `overview <https://git.ziirish.me/ziirish/burp-ui/issues/55>`_
- Add the ability to `chain multiple authentication backends <https://git.ziirish.me/ziirish/burp-ui/issues/79>`_
- Add display versions `within the interface <https://git.ziirish.me/ziirish/burp-ui/issues/89>`_
- Add support for `zip64 <https://git.ziirish.me/ziirish/burp-ui/issues/97>`_
- Add Basic HTTP Authentication
- Add full documented API
- Fix issue `#81 <https://git.ziirish.me/ziirish/burp-ui/issues/81>`_
- Fix issue `#87 <https://git.ziirish.me/ziirish/burp-ui/issues/87>`_
- Fix issue `#88 <https://git.ziirish.me/ziirish/burp-ui/issues/88>`_
- Fix issue `#92 <https://git.ziirish.me/ziirish/burp-ui/issues/92>`_
- Fix issue `#95 <https://git.ziirish.me/ziirish/burp-ui/issues/95>`_
- `demo <https://demo.ziirish.me/>`_
- API refactoring
- Security fixes
- Bugfixes
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.7.1...master>`__
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/0.0.7...master>`__
0.0.7.3
-------
0.0.7.3 (09/26/2015)
--------------------
- Fix issue `#77 <https://git.ziirish.me/ziirish/burp-ui/issues/77>`_
- Doc
0.0.7.2
-------
0.0.7.2 (09/01/2015)
--------------------
- Fix issue `#73 <https://git.ziirish.me/ziirish/burp-ui/issues/72>`_
- Fix issue `#74 <https://git.ziirish.me/ziirish/burp-ui/issues/74>`_
- Doc
0.0.7.1
-------
0.0.7.1 (08/22/2015)
--------------------
- Add `Burp-2 backend <https://git.ziirish.me/ziirish/burp-ui/issues/52>`_
- Add `sortable tables <https://git.ziirish.me/ziirish/burp-ui/issues/51>`_
@ -66,8 +71,8 @@ Current
- Bufixes
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.6...v0.0.7.1>`__
0.0.6
-----
0.0.6 (12/15/2014)
------------------
- Add `gunicorn support <https://git.ziirish.me/ziirish/burp-ui/commit/836f522f51ba0706ca94b379d93b20c75e71ecb1>`_
- Add `init script for CentOS <https://git.ziirish.me/ziirish/burp-ui/issues/27>`_
@ -87,32 +92,32 @@ Current
- Bugfixes
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.5...v0.0.6>`__
0.0.5
-----
0.0.5 (09/22/2014)
------------------
- Add multi-server support
- Fix bugs
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.4...v0.0.5>`__
0.0.4
-----
0.0.4 (09/07/2014)
------------------
- Add the ability to download files directly from the web interface
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.3...v0.0.4>`__
0.0.3
-----
0.0.3 (09/02/2014)
------------------
- Add authentication
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.2...v0.0.3>`__
0.0.2
-----
0.0.2 (08/25/2014)
------------------
- Fix bugs
- `Full changelog <https://git.ziirish.me/ziirish/burp-ui/compare/v0.0.1...v0.0.2>`__
0.0.1
-----
0.0.1 (08/25/2014)
------------------
- Initial release

2
LICENSE
View file

@ -4,7 +4,7 @@ The following License only applies to the burp-ui sources
================================================================================
Copyright (c) 2014-2015 by Benjamin SANS (Ziirish) <ziirish+burpui@ziirish.info>
Copyright (c) 2014-2016 by Benjamin SANS (Ziirish) <hi+burpui@ziirish.me>
http://ziirish.info/
Some rights reserved.

1
buiagent.sample.cfg
View file

@ -1 +0,0 @@
share/burpui/etc/buiagent.sample.cfg

1
burpui.sample.cfg
View file

@ -1 +0,0 @@
share/burpui/etc/burpui.sample.cfg

4
burpui/__init__.py
View file

@ -7,7 +7,7 @@ jQuery/Bootstrap
:platform: Unix
:synopsis: Burp-UI main module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import os
@ -20,7 +20,7 @@ if sys.version_info < (3, 0):
__title__ = 'burp-ui'
__author__ = 'Benjamin SANS (Ziirish)'
__author_email__ = 'ziirish+burpui@ziirish.info'
__author_email__ = 'hi+burpui@ziirish.me'
__url__ = 'https://git.ziirish.me/ziirish/burp-ui'
__doc__ = 'https://burp-ui.readthedocs.org/en/latest/'
__description__ = ('Burp-UI is a web-ui for burp backup written in python with '

2
burpui/_compat.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI compatibility module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import sys

2
burpui/_json.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI json compatibility module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import ujson

2
burpui/_rtfd.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI wrapper documentation module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""

2
burpui/api/__init__.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""

2
burpui/api/client.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI client api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
# This is a submodule we can also use "from ..api import api"

2
burpui/api/clients.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI clients api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
# This is a submodule we can also use "from ..api import api"

2
burpui/api/misc.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI misc api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
# This is a submodule we can also use "from ..api import api"

2
burpui/api/restore.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI restore api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import select

2
burpui/api/settings.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI settings api module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import sys

2
burpui/exceptions.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI exceptions module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
# Agent does not need "real" HTTP errors

2
burpui/misc/acl/interface.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI ACL interface.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
from abc import ABCMeta, abstractmethod, abstractproperty

2
burpui/misc/auth/interface.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI authentication interface.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
from flask.ext.login import UserMixin

2
burpui/misc/backend/burp1.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI burp1 backend module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import re

2
burpui/misc/backend/interface.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI backend interface.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
from abc import ABCMeta, abstractmethod

2
burpui/misc/parser/interface.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI parser interface.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
from ...utils import BUIlogging

2
burpui/server.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI server module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import traceback

2
burpui/utils.py
View file

@ -4,7 +4,7 @@
:platform: Unix
:synopsis: Burp-UI utils module.
.. moduleauthor:: Ziirish <ziirish@ziirish.info>
.. moduleauthor:: Ziirish <hi+burpui@ziirish.me>
"""
import math

2
docker/docker-burp1/Dockerfile
View file

@ -1,5 +1,5 @@
FROM debian:jessie
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y supervisor logrotate locales wget curl uthash-dev g++ make libssl-dev librsync-dev python2.7-dev git python-virtualenv python-pip cron libffi-dev \

2
docker/docker-burp2/Dockerfile
View file

@ -1,5 +1,5 @@
FROM debian:jessie
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y supervisor logrotate locales wget curl uthash-dev g++ make libssl-dev librsync-dev python2.7-dev git python-virtualenv python-pip cron libffi-dev autoconf automake libtool libz-dev libyajl-dev \

2
docker/docker-burpui/Dockerfile
View file

@ -1,5 +1,5 @@
FROM debian:jessie
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y supervisor logrotate locales wget curl python2.7-dev git python-virtualenv gunicorn python-pip cron libffi-dev \

2
docker/docker-cli1/Dockerfile
View file

@ -1,5 +1,5 @@
FROM debian:jessie
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y supervisor logrotate locales wget curl uthash-dev g++ make libssl-dev librsync-dev git cron \

2
docker/docker-cli2/Dockerfile
View file

@ -1,5 +1,5 @@
FROM debian:jessie
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y supervisor logrotate locales wget curl uthash-dev g++ make libssl-dev librsync-dev git cron autoconf automake libtool libz-dev libyajl-dev \

3
docker/docker-cli2/assets/setup/install
View file

@ -12,9 +12,10 @@ git clone $BURP
cd burp
git checkout tags/$BURP_VERSION
autoreconf -vif
./configure
./configure --prefix=/usr --sysconfdir=/etc/burp --localstatedir=/var
make -j4
make install
#make install-all
# configure supervisord log rotation
cat > /etc/logrotate.d/supervisord <<EOF

15
docs/_themes/flask/layout.html vendored
View file

@ -21,4 +21,19 @@
{% if pagename == 'index' %}
</div>
{% endif %}
<!-- Piwik -->
<script type="text/javascript">
var _paq = _paq || [];
_paq.push(['trackPageView']);
_paq.push(['enableLinkTracking']);
(function() {
var u="//ziirish.info/piwik/";
_paq.push(['setTrackerUrl', u+'piwik.php']);
_paq.push(['setSiteId', 5]);
var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s);
})();
</script>
<noscript><p><img src="//ziirish.info/piwik/piwik.php?idsite=5" style="border:0;" alt="" /></p></noscript>
<!-- End Piwik Code -->
{%- endblock %}

17
docs/buiagent.rst
View file

@ -68,6 +68,17 @@ The architecture is described bellow:
+--------------------+
Requirements
------------
The agent is powered by gevent. In order to install it, you can run the
following command:
::
pip install "burp-ui[agent]"
Configuration
-------------
@ -122,13 +133,13 @@ Here is a full usage example:
::
# On the server called 'agent1'
agent1:~$ python path/to/bui-agent -c path/to/buiagent.cfg
agent1:~$ bui-agent -c path/to/buiagent.cfg
# On the server called 'agent2'
agent2:~$ python path/to/bui-agent -c path/to/buiagent.cfg
agent2:~$ bui-agent -c path/to/buiagent.cfg
# On the server called 'front'
front:~$ python path/to/burp-ui -c path/to/burpui.cfg
front:~$ burp-ui -c path/to/burpui.cfg
This example uses three servers. You then only need to point your browser to

6
docs/conf.py
View file

@ -52,7 +52,7 @@ master_doc = 'index'
# General information about the project.
project = u'Burp-UI'
copyright = u'2015, Ziirish'
copyright = u'2016, Ziirish'
author = u'Ziirish'
# The version info for the project you're documenting, acts as replacement for
@ -213,7 +213,7 @@ html_logo = '_static/logo.png'
#html_search_scorer = 'scorer.js'
# Output file base name for HTML help builder.
htmlhelp_basename = 'Burp-UIdoc'
htmlhelp_basename = 'Burp-UI doc'
# -- Options for LaTeX output ---------------------------------------------
@ -280,7 +280,7 @@ man_pages = [
# dir menu entry, description, category)
texinfo_documents = [
(master_doc, 'Burp-UI', u'Burp-UI Documentation',
author, 'Burp-UI', 'One line description of project.',
author, 'Burp-UI', 'Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap.',
'Miscellaneous'),
]

1
docs/index.rst
View file

@ -27,6 +27,7 @@ Documentation
contributing
changelog
faq
step-by-step
developer

4
docs/installation.rst
View file

@ -27,8 +27,8 @@ By default `Burp-UI`_ ships with a sample file located in
virtualenv)
.. note::
It is advised to copy the sample configuration in ``/etc/burp/burpui.cfg``
and to edit this file so that it is not overwritten on every upgrade.
It is advised to copy the sample configuration in ``/etc/burp/burpui.cfg``
and to edit this file so that it is not overwritten on every upgrade.
Then you can run ``burp-ui``: ``burp-ui``

12
docs/introduction.rst
View file

@ -9,13 +9,21 @@ The project also provides a full documented `API <api.html>`_ so that you can
develop any front-end you like on top of it. The core will take care of the
communication with the burp server(s) for you.
.. note::
Although the `Burp`_'s author and I exchange a lot, our products are totally
distinct. So I would like people to understand some issues might be related
to `Burp-UI`_, but some other might be related to `Burp`_ and I may not be
able to help you in the later case.
There is a dedicated mailing-list for `Burp`_ related issues. You can find
details `here <http://burp.grke.org/contact.html>`_
Known Issues
------------
Because it's an Open Source project, people are free (and encouraged) to open
issues in the `bug-tracker <https://git.ziirish.me/ziirish/burp-ui/issues>`_.
You will find there the current opened issues.
issues in the `bug-tracker <https://git.ziirish.me/ziirish/burp-ui/issues>`_
where will find there the current opened issues.
There are also a few issues unrelated to the code itself:

25
docs/requirements.rst
View file

@ -4,6 +4,10 @@ Requirements
Please note that, `Burp-UI`_ must be running on the same server that runs the
burp-server for some features.
.. note::
At the moment, `Burp-UI`_ and this doc is mostly debian-centric but feel
free to contribute for other distributions!
LDAP
----
@ -27,10 +31,29 @@ On Debian:
aptitude install python-openssl
Alternatively, you can install the python package using the following command:
::
pip install "burp-ui[ssl]"
Burp1
-----
The `burp1 backend <usage.html#burp1>`__ supports burp versions from 1.3.48 to
1.4.40.
With these versions of burp, the status port is only listening on the machine
loopback (ie. ``localhost`` or ``127.0.0.1``). It means you *MUST* run
`Burp-UI`_ on the same host that is running your burp server in order to be able
to access burp's statistics.
Alternatively, you can use a `bui-agent <buiagent.html>`__.
Burp2
-----
The `burp2 backend <usage.html#burp2>`_ supports only burp 2.0.18 and above.
The `burp2 backend <usage.html#burp2>`__ supports only burp 2.0.18 and above.
If you are using an older version of burp2 `Burp-UI`_ will fail to start.
.. _Burp-UI: https://git.ziirish.me/ziirish/burp-ui

165
docs/step-by-step.rst Normal file
View file

@ -0,0 +1,165 @@
Step By Step
============
Although `Burp-UI`_ tries to make `Burp`_ accessible to everyone, both products
have their complexity.
In this *Step by Step*, I would like to introduce you different use-cases with
their associated configurations, descriptions and comments.
In every case, we will consider neither `Burp`_ or `Burp-UI`_ are installed and
describe the steps to setup your server from Scratch.
.. note::
Again, this part of the doc is mostly debian-centric. If some users are
willing to adapt these examples with other distros I would be very thankful.
1. `Burp1 server`_ with `Burp-UI`_
2. `Burp2 server`_ with `Burp-UI`_
3. `Multiple servers`_ with `bui-agents <buiagent.html>`_
Burp1 server
------------
In this scenario, we are going to install a `Burp`_ server version 1.4.40 which
is the current stable version. We assume you are using the user *root* to run
the following commands.
We begin with the installation of `Burp`_ itself.
First, we need some system requirements in order to compile `Burp`_ and to
install `Burp-UI`_:
::
apt-get update
apt-get install uthash-dev g++ make libssl-dev librsync-dev python2.7-dev \
git python-pip libffi-dev
Now we retrieve the `Burp`_ sources and then we compile and install it:
::
cd /usr/src
git clone https://github.com/grke/burp.git
cd burp
git checkout tags/1.4.40
./configure --disable-ipv6
make
make install
# we also install init scripts
cp debian/init /etc/init.d/burp
cat >/etc/default/burp<<EOF
RUN="yes"
DAEMON_ARGS="-c /etc/burp/burp-server.conf"
EOF
chmod +x /etc/init.d/burp
update-rc.d burp defaults
It is now time to install `Burp-UI`_:
::
pip install --upgrade burp-ui
Now that everything is installed, let's configure our tools!
In order to perform online restorations, `Burp-UI`_ relies on a classical
`Burp`_ client.
We need to define our client, and we also need to allow it to perform
restorations for other clients. We will set it up globally. Our client will be
named *bui*:
::
# burp-ui client's definition
cat >/etc/burp/clientconfdir/bui<<EOF
password = abcdefgh
EOF
# grant our client to perform restorations for others
echo "restore_client = bui" >>/etc/burp/burp-server.conf
# now we generate ou client configuration
cat >/etc/burp/burp.conf<<EOF
mode = client
port = 4971
server = 127.0.0.1
password = abcdefgh
cname = bui
pidfile = /var/run/burp.bui.pid
syslog = 0
stdout = 1
progress_counter = 1
ca_burp_ca = /usr/sbin/burp_ca
ca_csr_dir = /etc/burp/CA-client
# SSL certificate authority - same file on both server and client
ssl_cert_ca = /etc/burp/ssl_cert_ca.pem
# Client SSL certificate
ssl_cert = /etc/burp/ssl_cert-client.pem
# Client SSL key
ssl_key = /etc/burp/ssl_cert-client.key
# SSL key password
ssl_key_password = password
# Common name in the certificate that the server gives us
ssl_peer_cn = burpserver
# The following options specify exactly what to backup.
include = /home
EOF
Our `Burp`_ server is now set up, we can start it:
::
/etc/init.d/burp start
Now we can configure `Burp-UI`_. The package comes with a default configuration
and init scripts. We copy them at the right place:
::
cp /usr/local/share/burpui/contrib/debian/init.sh /etc/init.d/burp-ui
chmod +x /etc/init.d/burp-ui
update-rc.d burp-ui defaults
cp /usr/local/share/burpui/etc/burpui.sample.cfg /etc/burp/burpui.cfg
The default configuration is plug and play for this case, we just have to start
`Burp-UI`_:
::
/etc/init.d/burp-ui start
Your server is now fully set-up, you can access `Burp-UI`_ by pointing your
browser to: http://server_ip:5000/
The default user / password is: admin / admin
For further customization, you can refer to the `usage`_ page of this
documentation.
Burp2 server
------------
[TODO]
Multiple servers
----------------
[TODO]
.. _Burp-UI: https://git.ziirish.me/ziirish/burp-ui
.. _Burp: http://burp.grke.net/
.. _usage: usage.html

47
docs/usage.rst
View file

@ -4,24 +4,27 @@ Usage
`Burp-UI`_ has been written with modularity in mind. The aim is to support
`Burp`_ from the stable to the latest versions. `Burp`_ exists in two major
versions: 1.x.x and 2.x.x.
The version 2.x.x is currently in heavy development and should bring a lot of
improvements, but also a lot of rework especially regarding the ``status port``
which is the main communication system between `Burp`_ and `Burp-UI`_.
.. note::
The version 2.x.x of `Burp`_ is currently in heavy development and should
bring a lot of improvements, but also a lot of rework especially regarding
the ``status port`` which is the main communication system between `Burp`_
and `Burp-UI`_.
Both `Versions`_ are supported by `Burp-UI`_ thanks to its modular design.
The consequence is you have various options in the configuration file to suite
every bodies needs.
everybody needs.
There are also different modules to support `Authentication`_ and `ACL`_ within
the web-interface.
.. warning::
`Burp-UI`_ tries to be the less intrusive as possible, nevertheless it ships
with the ability to manage `Burp`_'s configuration files.
This feature **requires** `Burp-UI`_ to be launched on the **same** server
that hosts your `Burp`_ instance.
You also have to make sure the user that runs `Burp-UI`_ has **enough**
privileges to edit those files.
`Burp-UI`_ tries to be as less intrusive as possible, nevertheless it ships
with the ability to manage `Burp`_'s configuration files.
This feature **requires** `Burp-UI`_ to be launched on the **same** server
that hosts your `Burp`_ instance.
You also have to make sure the user that runs `Burp-UI`_ has **enough**
privileges to edit those files.
Configuration
@ -215,13 +218,19 @@ Versions
These backends allow you to either connect to a `Burp`_ server version 1.x.x or
2.x.x.
If you are using a `Burp`_ server version 2.x.x you **have** to use the `Burp2`_
backend, no matter what `Burp`_'s protocol you are using.
.. note::
If you are using a `Burp`_ server version 2.x.x you **have** to use the
`Burp2`_ backend, no matter what `Burp`_'s protocol you are using.
Burp1
^^^^^
.. note::
Make sure you have read and understood the `requirements
<requirements.html#burp1>`__ first.
The *burp-1* backend can be enabled by setting the *version* option to *1* in
the ``[Global]`` section of your `burpui.cfg`_ file:
@ -269,6 +278,10 @@ Each option is commented, but here is a more detailed documentation:
Burp2
^^^^^
.. note::
Make sure you have read and understood the `requirements
<requirements.html#burp2>`__ first.
The *burp-2* backend can be enabled by setting the *version* option to *2* in
the ``[Global]`` section of your `burpui.cfg`_ file:
@ -332,9 +345,9 @@ LDAP
^^^^
The *ldap* authentication backend has some dependencies, please refer to the
`requirements <requirements.html>`_ page. To enable this backend, you need to
set the *auth* option of the ``[Global]`` section of your `burpui.cfg`_ file to
*ldap*:
`requirements <requirements.html#ldap>`_ page. To enable this backend, you need
to set the *auth* option of the ``[Global]`` section of your `burpui.cfg`_ file
to *ldap*:
::
@ -413,7 +426,9 @@ Now you can add *basic* specific options:
user1: otherpassword
.. note:: Each line defines a new user with the *key* as the username and the *value* as the password
.. note::
Each line defines a new user with the *key* as the username and the *value*
as the password
ACL

1
pictures
View file

@ -1 +0,0 @@
docs/_static

4
setup.py
View file

@ -190,7 +190,7 @@ setup(
author=author,
author_email=author_email,
url=url,
keywords='burp web ui',
keywords='burp web ui backup monitoring',
packages=find_packages(),
include_package_data=True,
package_data={
@ -213,10 +213,12 @@ setup(
],
install_requires=requires,
extras_require={
'ssl': ['pyOpenSSL'],
'ldap_authentication': ['ldap3'],
'extra': ['ujson'],
'gunicorn': ['gevent'],
'gunicorn-extra': ['redis', 'Flask-Session'],
'agent': ['gevent'],
'test': test_requires,
'dev': dev_requires,
},

2
test/docker/py2.7/Dockerfile
View file

@ -1,5 +1,5 @@
FROM python:2.7
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y locales wget curl uthash-dev g++ make libssl-dev librsync-dev python2.7-dev \

2
test/docker/py3.4/Dockerfile
View file

@ -1,5 +1,5 @@
FROM python:3.4
MAINTAINER ziirish@ziirish.info
MAINTAINER hi+burpui@ziirish.me
RUN apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y locales wget curl uthash-dev g++ make libssl-dev librsync-dev python3.4-dev \

67
test/run_docker.sh
View file

@ -3,13 +3,73 @@
SCRIPT=$(readlink -f "$0")
# Absolute path this script is in, thus /home/user/bin
SCRIPTPATH=$(dirname "$SCRIPT")
me=$(basename $0)
USR=${1:-${USER}}
IMAGES="2.7 3.4"
# prints error in all cases
function myerror() {
echo "[e] $*" >&2
}
# prints the help menu and exit
function usage() {
cat <<EOF
$me [options...]
usage:
-u, --user User prefix for images
-t, --test List of tests to run separated by a coma
-h, --help Print this menu and exit
EOF
ret=${1:-0}
exit $ret
}
# options may be followed by one colon to indicate they have a required argument
options=$(getopt -n "$me" -o "hu:t::" -l "help,user:,test::" -- "$@") || {
# something went wrong, getopt will put out an error message for us
usage 1
}
set -- $options
if [ "$(getopt --version)" = " --" ]; then
# bsd getopt - skip configuration declarations
nb_delims_to_remove=2
while [ $# -gt 0 ]; do
if [ $1 = "--" ]; then
shift
nb_delims_to_remove=$(expr $nb_delims_to_remove - 1)
if [ $nb_delims_to_remove -lt 1 ]; then
break
fi
fi
shift
done
fi
while [ $# -gt 0 ]
do
case $1 in
-h|--help) usage ;;
# for options with required arguments, an additional shift is required
-u|--user) user=$(sed "s/^.//;s/.$//" <<<$2) ; shift ;;
-t|--test) [ -z "$tests" ] && tests=$(sed "s/,/ /g;s/^.//;s/.$//" <<<$2) || tests="$tests $(sed 's/,/ /g;s/^.//;s/.$//' <<<$2)" ; shift ;;
(--) shift; break ;;
(-*) myerror "$me: error - unrecognized option $1"; usage 1 ;;
(*) break ;;
esac
shift
done
for arg; do [ -z "${tests}" ] && tests=$(sed "s/,/ /g;s/^.//;s/.$//" <<<$arg) || tests="$tests $(sed 's/,/ /g;s/^.//;s/.$//' <<<$arg)"; done
USR=${user:-${USER}}
IMAGES="${tests:-2.7 3.4}"
echo "[+] Building docker images..."
for img in $IMAGES
do
[ -d ${SCRIPTPATH}/docker/py${img} ] || continue
echo "[-] ${img}"
docker build -t ${USR}/py${img}:${img} ${SCRIPTPATH}/docker/py${img}
done
@ -17,6 +77,7 @@ done
echo "[+] Running tests..."
for img in $IMAGES
do
[ -d ${SCRIPTPATH}/docker/py${img} ] || continue
echo "[-] ${img}"
docker run -it --rm -v ${SCRIPTPATH}/..:/home/burp-ui ${USR}/py${img}:${img} bash -c "cd /home/burp-ui && /home/burp-ui/test/run_tests.sh"
docker run -it --rm -v ${SCRIPTPATH}/..:/home/burp-ui ${USR}/py${img}:${img} /bin/bash -c "cd /home/burp-ui && /home/burp-ui/test/run_tests.sh"
done

2
test/run_tests.sh
View file

@ -105,7 +105,7 @@ pip install --upgrade -r requirements.txt
pip install --upgrade -r test-requirements.txt
mkdir -p /etc/burp
cp burpui.sample.cfg /etc/burp/burpui.cfg
cp share/burpui/etc/burpui.sample.cfg /etc/burp/burpui.cfg
nosetests --with-coverage --cover-package=burpui test/test_burpui.py
ret=$?
rm /etc/burp/burpui.cfg

4
test/test_burpui.py
View file

@ -22,7 +22,7 @@ from burpui import init as BUIinit
class BurpuiLiveTestCase(LiveServerTestCase):
def create_app(self):
conf = os.path.join(os.path.dirname(os.path.realpath(__file__)), '../burpui.sample.cfg')
conf = os.path.join(os.path.dirname(os.path.realpath(__file__)), '../share/burpui/etc/burpui.sample.cfg')
bui = BUIinit(debug=12, gunicorn=False, unittest=True)
bui.config['DEBUG'] = False
bui.config['TESTING'] = True
@ -243,7 +243,7 @@ class BurpuiLoginTestCase(TestCase):
), follow_redirects=True)
def create_app(self):
conf = os.path.join(os.path.dirname(os.path.realpath(__file__)), '../burpui.sample.cfg')
conf = os.path.join(os.path.dirname(os.path.realpath(__file__)), '../share/burpui/etc/burpui.sample.cfg')
bui = BUIinit(conf, False, None, False, unittest=True)
bui.config['TESTING'] = True
bui.config['LIVESERVER_PORT'] = 5001