BurpSuite2022插件介绍

rules:- rule:  - color: yellow    engine: nfa    loaded: true    name: Email    regex: (([a-zA-Z0-9][_|.])*[a-zA-Z0-9]+@([a-zA-Z0-9][-|_|.])*[a-zA-Z0-9]+.((?!js|css|jpg|jpeg|png|ico)[a-zA-Z]{2,}))    scope: response  - color: green    engine: dfa    loaded: true    name: Shiro    regex: (=deleteMe|rememberMe=)    scope: any  - color: green    engine: dfa    loaded: true    name: JSON Web Token    regex: (ey[A-Za-z0-9_-]{10,}.[A-Za-z0-9._-]{10,}|ey[A-Za-z0-9_/+-]{10,}.[A-Za-z0-9._/+-]{10,})    scope: any  - color: green    engine: dfa    loaded: true    name: Swagger UI    regex: ((swagger-ui.html)|("swagger":)|(Swagger UI)|(swaggerUi))    scope: response  - color: orange    engine: nfa    loaded: true    name: Chinese IDCard    regex: '''[^0-9]((d{8}(0d|10|11|12)([0-2]d|30|31)d{3}$)|(d{6}(18|19|20)d{2}(0[1-9]|10|11|12)([0-2]d|30|31)d{3}(d|X|x)))[^0-9]'''    scope: response body  - color: orange    engine: nfa    loaded: true    name: Chinese Mobile Number    regex: '''[^0-9A-Za-z](1(3([0-35-9]d|4[1-8])|4[14-9]d|5([d]d|7[1-79])|66d|7[2-35-8]d|8d{2}|9[89]d)d{7})[^0-9A-Za-z]'''    scope: response body  - color: cyan    engine: dfa    loaded: true    name: RCE Paramters    regex: ((cmd=)|(exec=)|(command=)|(execute=)|(ping=)|(query=)|(jump=)|(code=)|(reg=)|(do=)|(func=)|(arg=)|(option=)|(load=)|(process=)|(step=)|(read=)|(function=)|(feature=)|(exe=)|(module=)|(payload=)|(run=)|(daemon=)|(upload=)|(dir=)|(download=)|(log=)|(ip=)|(cli=))    scope: request  - color: yellow    engine: dfa    loaded: true    name: Java Deserialization    regex: (javax.faces.ViewState)    scope: response  - color: cyan    engine: dfa    loaded: true    name: Debug Logic Parameters    regex: ((access=)|(adm=)|(admin=)|(alter=)|(cfg=)|(clone=)|(config=)|(create=)|(dbg=)|(debug=)|(delete=)|(disable=)|(edit=)|(enable=)|(exec=)|(execute=)|(grant=)|(load=)|(make=)|(modify=)|(rename=)|(reset=)|(root=)|(shell=)|(test=)|(toggl=))    scope: request  - color: cyan    engine: nfa    loaded: true    name: URL As A Value    regex: (=(https?://.*|https?%3(a|A)%2(f|F)%2(f|F).*))    scope: request  - color: gray    engine: nfa    loaded: true    name: Linkfinder    regex: (?:"|')(((?:[a-zA-Z]{1,10}://|//)[^"'/]{1,}.[a-zA-Z]{2,}[^"']{0,})|((?:/|../|./)[^"'><,;|*()(%%$^/\[]][^"'><,;|()]{1,})|([a-zA-Z0-9_-/]{1,}/[a-zA-Z0-9_-/]{1,}.(?:[a-zA-Z]{1,4}|action)(?:[?|#][^"|']{0,}|))|([a-zA-Z0-9_-/]{1,}/[a-zA-Z0-9_-/]{3,}(?:[?|#][^"|']{0,}|))|([a-zA-Z0-9_-]{1,}.(?:php|asp|aspx|jsp|json|action|html|js|txt|xml)(?:[?|#][^"|']{0,}|)))(?:"|')    scope: any  - color: green    engine: nfa    loaded: true    name: OSS    regex: ([A|a]ccess[K|k]ey[I|i][d|D]|[A|a]ccess[K|k]ey[S|s]ecret)    scope: any  - color: yellow    engine: nfa    loaded: true    name: SSH Private Key    regex: ([-]+BEGIN [^s]+ PRIVATE KEY[-])    scope: response  type: Basic Information