crashbrz / bet

Burp Enterprise Toolkit

BET (Burp Enterprise Toolkit)

This repository intends to have a set of tools to take advantage of (not available or partially available on the web interface) features on the Burp Enterprise.

BIS (Burp Importer & Scheduler)

• Since bulk schedules are not available on Burp Web Interface, this tool automatically imports and schedules all sites from an input(txt) file.
• File: bis.go

Usage example:

──(crash㉿Anubis)-[~]
└─$ go run bis.go -u https://burpserver.yourcompany.com:8080 -k BvujYxnHNNKPtNXfULfxhjXuyUjngCQn -i url_list.txt -r "FREQ=MONTHLY;INTERVAL=1" -s ab1c234d-56e7-8efa-9b0a-1b24c56de789 -t "2099-01-15T12:05:00+00:00"

• The above command will import all sites listed in url_list.txt and schedule each one to start the scan on January 15, 2099, at 12:05. Also, the scan will execute on the same date/time every month after the starting date.

BSI (Burp Scan ID)

• Retrieves all scans names and ID's from Burp Enterprise.
• The Scan ID can be used as -s flag on Burp Importer & Scheduler(bis.go)
• Grepable output
• File: bis.go

Usage example:

──(crash㉿Anubis)-[~]
└─$ go run bis.go -u https://burpserver.yourcompany.com:8080 -k BvujYxnHNNKPtNXfULfxhjXuyUjngCQn | grep -i YourScanName | cut -d ":" -f 2

GetFolderId

• Retrieves all folders names and ID's from Burp Enterprise.
• The Folder ID can be used as -i flag on BurpDeleteFolder.go
• Grepable output.
• File: GetFolderId.go

Usage example:

──(crash㉿Anubis)-[~]
└─$ go run GetFolderId.go -u https://burpserver.yourcompany.com:8080 -k BvujYxnHNNKPtNXfULfxhjXuyUjngCQn | grep -i YourFolderName | cut -d ":" -f 2

DeleteFolder

• Delete a given folder by ID.
• The Folder ID can be retrieved running the GetFolderId tool.
• Grepable output
• File: DeleteFolder.go

Usage example:

──(crash㉿Anubis)-[~]
└─$ go run GetFolderId.go -u https://burpserver.yourcompany.com:8080 -k BvujYxnHNNKPtNXfULfxhjXuyUjngCQn -i 9999

GetFolderIDSiteID

• Dumps all sites with their respective ID and current Folder ID. (Folder ID 0 is the root folder, the default folder after importing)
• Grepable output
• File: GetFolderIDSiteID.go

Usage example:

──(crash㉿Anubis)-[~]
└─$ go run GetFolderIDSiteID.go -u https://burpserver.yourcompany.com:8080 -k BvujYxnHNNKPtNXfULfxhjXuyUjngCQn

Usage/Help

Please refer to the output of -h and -v for usage information and general help. Also, you can contact me (@crashbrz) on Twitter

Installation

Clone the repository in the desired location.
Remember to install GoLang.

License

BET and the tools are licensed under the SushiWare license. Check docs/license.txt for more information.

Go Version

Tested on:
Go version: go1.17.6 linux/amd64
Kali 2021.4 Ubunto 20