aress31 / flarequench

Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.

flarequench

A Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.

Installation

Compilation

1. Install and configure Gradle.

2. Download this repository.

   git clone https://github.com/aress31/flarequench
   cd .\flarequench\

3. Create the standalone jar:

   gradle build shadowJar

Loading the Extension Into the Burp Suite

In Burp Suite, under the Extender/Options tab, click on the Add button and load the fatJar located in the .\build\libs folder.

Roadmap

• Improve the reliablity.
• Optimise the source code.

Sponsor 💖

If you want to support this project and appreciate the time invested in developping, maintening and extending it; consider donating toward my next cup of coffee. ☕

It is easy, all you got to do is press the Sponsor button at the top of this page or alternatively click this link. 💸

Reporting Issues

Found a bug? I would love to squash it! 🐛

Please report all issues on the GitHub issues tracker.

Contributing

You would like to contribute to better this project? 🤩

Please submit all PRs on the GitHub pull requests tracker.

License

See LICENSE.

flarequench's Issues

error when loading extension to Burp v2.0.11beta

java.lang.UnsupportedClassVersionError: burp/BurpExtender has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.defineClass(Unknown Source)
at java.net.URLClassLoader.access$100(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at burp.a3_.a(Unknown Source)
at burp.a3_.(Unknown Source)
at burp.gcg.a(Unknown Source)
at burp.ao3.lambda$panelLoaded$0(Unknown Source)
at java.lang.Thread.run(Unknown Source)
The extension could not be loaded because it requires a later version of Java. To use this extension you will need to start Burp with the required or later Java version.

Open JDK

error while execute
gradle build shadowJar
Caused by: java.lang.IllegalArgumentException: Unsupported class file major version 66
which openJDK works? currently im using openJDK 22