Import Proxy History at startup

[ghost]

Hi,
thanks for the great tool!

As a suggestion I would like to see an option to import proxy history at startup so that I do not lose all the HUNT entries after having closed Burp.
Something like that is already implemented in Logger++ if you want to take a look.

Thanks in advance!

[cak]

👋 @simonebovi!

That is an awesome feature request!

I'll work on getting that added in for the next release. I'll keep you posted on the status and when there is a beta to test!

🍻

[ghost]

A caveat is that this would not consider any deleted HUNT entries.

A better way would be to find a way to automatically save the latest status of HUNT and then reload that (if wanted) at the next startup, so to not lose all the previous work done :)

[cak]

Thanks, that would be awesome. I'm not sure if/how we can do that with the current Burp Extender API (other than saving simple data points like options), have you seen any extensions save their state? The only trick I know is to use the proxy history comments, but I'll see what I can find out!

[cak]

@simonebovi I was able to work out a draft addressing the loading proxy history and duplicates, if possible could you check out the release here for the updates:
https://github.com/cak/HUNT/releases/tag/2.3

Let me know your thoughts, if the changes work I'll then open a PR to this repo. 🚀

(I'm still working on the state issue, but I at least wanted to make the other changes)

Thanks again! 🥳

[ghost]

Hi,
just tried the new version.

Import proxy history function works really great and also catches pretty well the duplicates too!

Related to duplicates, if we want to improve this thing more, we could try to implement something like this.

If I have two URLs:

1. https://[HOST]/eligibility?intent=SALESCHAT&page=/it/home
2. https://[HOST_2]/eligibility?intent=SALESCHAT&page=/it/home

These 2 should be the same URL logically.
I am not sure that an algorithm could verify this 100% correctly and for me it is better to have some semi-manual approach instead.

I don't know if it is possible but it would be great if we can manually select multiple similar logic URLs so to regroup them on a single entry, conceptually similar to what is done on Burp issues:

This way it should be easier to avoid logical duplicates too after having firstly ordered the entries by the param name.
Also if we test the parameter and we find it is a false positive, it should be easy to just delete the group with a single action.

Not sure if this is clear.

And let's hope for the best regarding the state saving!

Thanks again!

[cak]

Thanks @simonebovi, for all your help!

I have added an option to ignore host when processing duplicates (issue #72), can you please check the updated release:
https://github.com/cak/HUNT/releases/tag/2.3

Let me know if this works to satisfy a couple of these requests, if so I'll PR the updates to the main repo (here).

Maybe we should move state saving to another issue?

[ghost]

Thanks! I will try in a couple of days. Yes, better to move state to another issue (looking at the API not sure if we can do anything though). Il giorno sab 18 lug 2020 alle 11:37 Caleb <[email protected]> ha scritto:

…

Thanks @simonebovi <https://github.com/SimoneBovi>, for all your help! I have added an option to ignore host when processing duplicates, can you please check the updated release: https://github.com/cak/HUNT/releases/tag/2.3 Let me know if this works to satisfy a couple of these requests, if so I'll PR the updates to the main repo (here). Maybe we should move state saving to another issue?

[cak]

@simonebovi Did you have a chance to check out the latest version of HUNT (2.3)? If so, can we close this issue? 🤩

[ghost]

Yes @cak,
it works great!

Thank you very much again! You rock!