
AES क्रैक के लिए Burpsuite प्लगइन
git clone https://github.com/jas502n/Burp_AES_Plugin/
cd ~/github/Burp_AES_Plugin/AESDecode
vi src/main/java/burp/BurpExtender.java
mvn install
[INFO] --- maven-install-plugin:2.4:install (default-install) @ AESCrack ---
[INFO] Installing /root/github/Burp_AES_Plugin/AESDecode/target/AESCrack-1.0-SNAPSHOT.jar to /root/.m2/repository/com/jas502n/AESCrack/1.0-SNAPSHOT/AESCrack-1.0-SNAPSHOT.jar
[INFO] Installing /root/github/Burp_AES_Plugin/AESDecode/pom.xml to /root/.m2/repository/com/jas502n/AESCrack/1.0-SNAPSHOT/AESCrack-1.0-SNAPSHOT.pom
[INFO] Installing /root/github/Burp_AES_Plugin/AESDecode/target/AESCrack-1.0-SNAPSHOT-jar-with-dependencies.jar to /root/.m2/repository/com/jas502n/AESCrack/1.0-SNAPSHOT/AESCrack-1.0-SNAPSHOT-jar-with-dependencies.jar
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 3.627 s
[INFO] Finished at: 2020-06-18T00:17:09+08:00
[INFO] ------------------------------------------------------------------------

अपना Burp Suite प्लगइन कैसे लिखें https://t0data.gitbooks.io/burpsuite/content/chapter16.html
किसी प्लेटफ़ॉर्म को ब्रूट-फोर्स करने के लिए BurpSuite एक्सटेंशन विकसित करना https://gorgias.me/2017/03/29/%E5%BC%80%E5%8F%91BurpSuite%E6%89%A9%E5%B1%95%E7%88%86%E7%A0%B4%E6%9F%90%E5%B9%B3%E5%8F%B0/
Burpsuite API Javadoc https://portswigger.net/burp/extender/api/
CoolCat द्वारा लिखित AesDecode प्लगइन, मेनू पेज एन्क्रिप्शन और डिक्रिप्शन, ब्रूट-फोर्स का समर्थन करता है https://github.com/TheKingOfDuck/ https://blog.gzsec.org/archives/
c0ny1 का jsEncrypter https://github.com/c0ny1/jsEncrypter
<dependencies>
<!-- https://mvnrepository.com/artifact/net.portswigger.burp.extender/burp-extender-api -->
<dependency>
<groupId>net.portswigger.burp.extender</groupId>
<artifactId>burp-extender-api</artifactId>
<version>1.7.22</version>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-assembly-plugin</artifactId>
<executions>
<execution>
<phase>package</phase>
<goals>
<goal>single</goal>
</goals>
</execution>
</executions>
<configuration>
<descriptorRefs>
<descriptorRef>jar-with-dependencies</descriptorRef>
</descriptorRefs>
</configuration>
</plugin>
</plugins>
</build>
IBurpExtender आधिकारिक रूप से implements होना चाहिए
IIntruderPayloadProcessor चूंकि हमें Intruder की ब्रूट-फोर्स सुविधा का उपयोग करना है, इसलिए implements की आवश्यकता है
public class BurpExtender implements IBurpExtender, IIntruderPayloadProcessor {
private static IExtensionHelpers helpers;
public final static String extensionName = "AESCrack"; // 插件名称
public final static String version = "1.0";
public final static String AES_IV = "1234567812345678"; // 设置 AES IV 值
public final static String AES_KEY = "key12345key67890"; // 设置 AES KEY 值
public static String encryptAES(String paramString1, String paramString2)
throws InvalidKeyException, NoSuchAlgorithmException, NoSuchPaddingException, UnsupportedEncodingException, InvalidAlgorithmParameterException, IllegalBlockSizeException, BadPaddingException {
SecretKeySpec key = new SecretKeySpec(paramString2.getBytes(), "AES");
IvParameterSpec iv = new IvParameterSpec("your-iv-value".getBytes()); //set iv
Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
cipher.init(1, key, iv);
return helpers.base64Encode(cipher.doFinal(paramString1.getBytes()));
}
processPayload विधि (AES KEY सेट करें)
public byte[] processPayload(byte[] currentPayload, byte[] originalPayload, byte[] baseValue) {
String dataParameter = helpers.bytesToString(currentPayload);
String AesEncodeStr = null;
try {
AesEncodeStr = encryptAES(dataParameter, "your-aes-key"); //set aes key
} catch (InvalidKeyException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (NoSuchPaddingException e) {
e.printStackTrace();
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
} catch (InvalidAlgorithmParameterException e) {
e.printStackTrace();
} catch (IllegalBlockSizeException e) {
e.printStackTrace();
} catch (BadPaddingException e) {
e.printStackTrace();
}
return helpers.stringToBytes(AesEncodeStr);
}
Intellij-idea में maven प्रोजेक्ट कैसे संकलित करें https://blog.csdn.net/u013044029/article/details/71681891
संकलन और रन सफल, target निर्देशिका में aes.jar फ़ाइल प्राप्त हुई
एक बिना निर्भरता (छोटी फ़ाइल) AESCrack-1.0-SNAPSHOT.jar
एक निर्भरता के साथ (बड़ी फ़ाइल) AESCrack-1.0-SNAPSHOT-jar-with-dependencies.jar
Burpsuite प्लगइन लोड करते समय, बिना निर्भरता वाला AESCrack-1.0-SNAPSHOT.jar उपयोग करें

