Burp-AnonymousCloud icon indicating copy to clipboard operation
Burp-AnonymousCloud copied to clipboard

Feature Request - Logging of extension generated traffic

Open AkikoOrenji opened this issue 2 years ago • 4 comments

Is it possible to log all the requests the extension is generating ? Apart from forwarding system proxy to burp and capturea i can't think of another way to do so ? Its a bit of a black box at the moment with not much logged apart from the below in the extension UI.

Beginning subdomain scanning, gathering subdomain lists. Building a list from the file: fierce-hostlist.txt Beginning HTTP/HTTPS subdomain scanning for AWS S3/Heroku/Github. Beginning DNS subdomain scanning for Azure. Subdomain scanning has completed.

AkikoOrenji avatar Nov 07 '22 05:11 AkikoOrenji

I would think an extension like Logger or Logger++ would log the requests. This seems redundant to add logging to the extension itself. It also adds "Issues" in the Target Site map as cloud resources are enumerated.

codewatchorg avatar Nov 07 '22 15:11 codewatchorg

I checked logger++ and didn't see any traffic being generated from the extension. Is that just me ?

AkikoOrenji avatar Nov 07 '22 21:11 AkikoOrenji

Logger++ visibility is determined by where it sits in your extension list (from what I understand), so you want it at the bottom to have visibility to all the other extensions (at least that is how I understand it).

If it is still not seeing/logging the traffic, then I'm not sure why, but I'm not sure it makes sense to add logging for every request the extension makes - unless the extension observes a cloud-based resource, it is mostly passive anyway.

codewatchorg avatar Nov 08 '22 16:11 codewatchorg

Thanks for the tip on Logger++. I wasn't aware of that one. Didn't seem to make a difference but appreciate the feedback.

AkikoOrenji avatar Nov 08 '22 21:11 AkikoOrenji