Extending Burp Suite

Setting up the Ruby environment for Burp Extensions

  1. Download a stable version of JRuby from JRuby Downloads
  2. Select the jar for Linux (JRuby x.x.x Complete .jar) or Executable for Windows.
  3. Import the environment from Burp Suite >> Extender >> Options >> Ruby Environment.

Import the Burp Suite Extender Core API IBurpExtender

alert.rb

require 'java'
java_import 'burp.IBurpExtender'

class BurpExtender
  include IBurpExtender

  def registerExtenderCallbacks(callbacks)
    callbacks.setExtensionName("Rubyfu Alert!")
    callbacks.issueAlert("Alert: Ruby goes evil!")
  end
end

Load the plugin alert.rb

Check Alert tab

Buby

Buby is a mashup of JRuby with the popular commercial web security testing tool Burp Suite from PortSwigger. Burp is driven from and tied to JRuby with a Java extension using the BurpExtender API. This extension aims to add Ruby scriptability to Burp Suite with an interface comparable to the Burp's pure Java extension interface.