DOCSEARCHbyAlgolia
Submit Docs

Unexpected information BurpSuite Extension

repository·master·Indexed 20 days ago

https://github.com/scriptkid-beta/unexpected_information

A BurpSuite extension that automatically flags sensitive information, JS API interfaces, and special fields in HTTP request packets. It provides color-coded highlighting in HTTP history and a dedicated Message Editor tab to display detected data such as ID cards, mobile phone numbers, IP addresses, emails, JWTs, and Shiro tokens.

Tokens
725
Snippets
1
Records
4
Agent score
22%

What's inside Unexpected information

  1. Understand the detection capabilities and highlighting of Unexpected information

    master

    The Unexpected information extension automatically scans request packets for sensitive data and specific patterns. When a match is found, the corresponding request in the HTTP history tab is color-coded, and a new tab named Unexpected information is created to display all matched information.

    Supported Detection List

    • ID Card information
    • Mobile phone numbers
    • IP addresses
    • Email addresses
    • JS file API interface paths
    • JS file URLs
    • Special fields (e.g., password, method: "post")
    • JSON Web Token (JWT)
    • Shiro (rememberMe=delete)
    • Dual-direction detection
    • Highlighting support

    Highlighting Color Map

    Information TypeHighlight Color
    EmailYellow
    Internal IPRed
    Mobile Phone NumberGreen
    ID Card NumberGreen
    Others (v2.3.1+)Gray

  2. Install the Unexpected information BurpSuite Extension

    master

    To use the Unexpected information extension in BurpSuite, follow these steps:

    1. Open BurpSuite.
    2. Navigate to Extender > Extensions.
    3. Click Add.
    4. Set Extension type to Java.
    5. Click Select file and choose the Unexpected information.jar file.

    Important: Ensure the file path does not contain any Chinese characters to avoid loading errors.

    BurpSuite >> Extender >> Extensions >> Add >> Extension type: Java >> Select file ...>> 选择对应的插件(Unexpected information.jar)

  3. How Unexpected information highlights HTTP messages

    master

    The extension automatically highlights HTTP requests and responses in Burp Suite based on the presence of sensitive information detected via regex patterns. When a match is found, the message is highlighted in the Burp UI with a specific color:

    • Yellow: Email addresses found in the response.
    • Red: IP addresses found in the response.
    • Green: Phone numbers or ID Card information found in either the request or the response.

    These highlights appear in the Proxy, Repeater, and other Burp tools where HTTP messages are displayed.

  4. Use the Unexpected information Message Editor Tab

    master

    The extension adds a custom tab named Unexpected information to the Message Editor in Burp Suite. This tab is only enabled when specific sensitive data is detected in the message content.

    Tab Behavior

    • Activation: The tab appears if the message (request or response) contains phone numbers, ID cards, IP addresses, emails, passwords, or specific JavaScript-related patterns.
    • Content: When opened, the tab displays a summarized report of the detected sensitive information, such as:
      • Exists phone information: <value>
      • Exists IdCard information: <value>
      • Exists ip information: <value>
      • Exists email information: <value>
      • Exists Special Field (<value>) (for passwords)
      • Interface information: <path>
      • URL information: <url>

    This tab provides a clean, aggregated view of all 'unexpected' information found within a single HTTP transaction.