Burp suite (from the scratch) Video 18 Video Lecture | Learn all about Burp Suite (English) - IT & Software

alright guys welcome back and in this
lesson I want to talk to you about this
area right here and this is under the
extender tab this is where you manage
all of your burp extensions so
essentially as you already know burp
comes with a bunch of tools that we went
over for the less you know however many
videos what you can also do is if you
say you know what I actually want to add
a new feature to burp suite you can
actually write it and I'll show you guys
the API of how you do that later on but
a lot of people right additional tools
to add additional features and you can
download them and add them to burp so
just like you would download an app for
your phone you can pretty much do the
same thing with burp now before I
continue and show you guys how to
install them and use them I just want to
warn you these apps these features they
aren't written by burp they're written
by other people now obviously anyone
using burp suite is in one way or
another a hacker may be ethical hacker
maybe not who knows but whenever you're
downloading these programs make sure
that it's from a trusted source don't
you just start finding a bunch online
clicking download because well that's
never a good idea so anytime you want to
browse it you go to this tab right here
be App Store I guess this is you know
their version of the app store not is
you know aesthetically pleasing as
apples or you know Android but hey it's
what we got so you know I probably don't
even need to show you how to use this is
pretty self-explanatory just click
through them you can you know look at
the rating and any time you click it it
gives you a nice little description
maybe some of the tools that are in it
what could one that I like to use is
this right here this is co2 and if you
guys ever use SQL map or maybe you need
a user generator for example you're
signing up for a website and you need
like a thousand fake users then this
will help you with that also if you guys
notice then other sections of burp suite
whenever you look at javascript it is
kind of cluttered and it doesn't really
look that great
with a prettier j/s which pretty much
just formats it and make it makes it a
lot more readable so again just a bunch
of different tools are included in this
extension so all right looks pretty cool
maybe I will install it so click it hit
install it goes online finds it grabs it
for you and check it out I don't even
know if you guys notice but we now have
an additional tab right here so you
click on this tab which is the extension
and as you can see it came with a whole
slew of tools pretty sweet eh now
another thing that I should tell you
guys is these extensions they don't just
have to be written in Java they can be
written in Python Ruby you have an API
and you can pretty much use it however
you want now anytime you have a tool
that depends on let's say Python you
need to hop over in options and of
course you need to have Python installed
on your computer so this is where you
say okay options here is my jar um here
is my Python configuration Ruby whatever
so there you go that is how you set up
burp to work with other programming
languages and might as well just look at
a quick demo of one of these tools so
let's say that we wanted to use the mono
user generator just use this one since
it's right here so this is pretty much
just going to generate a bunch of names
and you can pick the range that they
come from i'll say i don't know maybe
anything from 1982 two thousand armed
i'll have a mixed case if you just do
lowercase then they're all going to be
lower case which is kind of weird
looking so mixed case and mixed case
this means that the first letter in each
name is capitalized so in the delimiter
i'll show you guys is with like minus
minus this is just a space in between
them so if you hit add combos just going
to generate them all and Adam for you
now usually you just want to have a
space right here instead of minus minus
and of course what you can do is you can
just copy all of these and use them for
example in a payload with intruder
pretty sweet until the lead I'm just
going to
select them all and I'll just use a
space is the limiter this time and hit
add combos boom look at that now if you
ever have a bunch of these apps
installed then your burp suite toolbar
can get a little bit cluttered so what
you can do is in extender extensions
this is where you can manage the entire
apps not the individual tool settings by
just the entire apps you can either
uncheck loaded and it'll just hide it
from that toolbar you can choose to
remove it completely by hitting remove
and if you have one of these tools
selected then it usually has settings
down below for example for the output
whenever this generates output do you
want to output it to the system console
was pretty much just means print it
within the program or do you want to
save it to some I don't know like some
text file whatever but there you go and
the last thing I want to explain is if
you ever want to build your own plugin
then what you can do is you can go over
to api's and this is all the
documentation of how you can build your
own app plugin feature or whatever you
want to call it so there you go write
your own download someone else's don't
download them at all but a lot of these
are actually really cool and add a lot
of functionality to burp suite so now
you know about it and well there you go