Nicolas Grégoire

Hello, the "Cookies" tab will list all cookies stored in the Proxy History, even if the corresponding messages aren't in scope. The bug is in method firstPass(), where isInScope() is...

Hello, in the extension's config, I see a way to configure a delay between requests (which defaults to 1s) but nothing related to parallelism (i.e number of threads). For a...

Hello, after launching a basic UploadScanner scan, I tried to stop it via the corresponding button. The GUI looks OK (scan running -> stopping scan -> scan stopped) but I...

Work-around for recent versions of Chromium

1

AutoChrome isn't compatible with recent versions of Chromium. However, it is possible to force the download of a specific version with the "-V" switch. So let's use an old and...

Hello, when launching AutoChrome, the message "You are using an unsupported command-line flag" appears. That can be fixed by adding the following line to the `chrome` script: "--test-type", Source: https://groups.google.com/a/chromium.org/forum/#!msg/chromium-discuss/O4WpwWvGz4A/jmrypvjNEQAJ...

Traffic to localhost isn't proxied

2

Hello, by default, traffic to localhost, 127.0.0.1, ... isn't proxied. That can be fixed by adding the following line to the `chrome` script: "--proxy-bypass-list=", Details at https://chromium.googlesource.com/chromium/src/+/master/net/docs/proxy.md#Bypass-rule_Subtract-implicit-rules

Hello, after installation of AutoChrome, the default White profile has a yellow background image. The script build_extensions.rb has the correct Hue value (i.e. "White: 0.0") but isn't run at installation...

Feature request: easier navigation when in expanded diff view

1

Hello, when reviewing results, I like to expand the diff view in order to maximise visible information. Currently, the expanded view doesn't allow to switch between sessions. So I have...

"Enabled" state not persisted through YAML files (works with Protobuf)

12

Piper behaves differently when importing YAML and Protobuf files. YAML won't persist the "enabled" state How to reproduce: - Add a new action (here a HTTP listener) to Piper and...

Hello, Taborator currently doesn't fetch Infiltrator-based interactions. The [API](https://portswigger.net/burp/extender/api/burp/IBurpCollaboratorClientContext.html) describes two distinct methods: fetchAllCollaboratorInteractions() and fetchAllInfiltratorInteractions(). The polling thread uses only [fetchAllCollaboratorInteractions()](https://github.com/hackvertor/taborator/blob/master/src/main/java/burp/BurpExtender.java#L386). Note that simply adding a call to fetchAllInfiltratorInteractions()...