#burpsuite #web

Vamos a usar este MCP custom ya que nos permite anonimizar cookies, correos y hosts

🔗 https://github.com/six2dez/burp-ai-agent

Instalación

git clone https://github.com/six2dez/burp-ai-agent.git
cd burp-ai-agent
JAVA_HOME=/usr/lib/jvm/java-21-openjdk-amd64 ./gradlew clean shadowJar

Lo subimos desde extensions de Burpsuite.

SETUP

1. Activar MCP Running / Active / Passive / Backend: codex-cli

2. Privacy Mode: Strict

3. Añadir regex

Regex de correos:

(?iu)(?<![\p{L}\p{N}._%+-])[\p{L}\p{N}._%+!#$&'*=/^`{|}~-]{1,254}@[\p{L}\p{N}.-]{1,253}\.[\p{L}]{2,63}
(?iu)(?<![\p{L}\p{N}._%+-])[\p{L}\p{N}._%+-]{1,254}(?:%40|%2540|%252540)[\p{L}\p{N}.%_-]{1,253}(?:\.|%2e|%252e|%25252e)[\p{L}]{2,63}
(?iu)(?<![\p{L}\p{N}._%+-])[\p{L}\p{N}._%+-]{1,254}(?:&#0{0,4}64;|&#x0{0,4}40;|&commat;|\\u0040)[\p{L}\p{N}._&#;\\-]{1,253}(?:\.|&#0{0,4}46;|&#x0{0,4}2e;|&period;|\\u002e)[\p{L}]{2,63}
(?iu)(?<![\p{L}\p{N}._%+-])[\p{L}\p{N}._%+-]{1,254}[ \t]{0,8}(?:\[at\]|\(at\)|\{at\})[ \t]{0,8}[\p{L}\p{N}.-]{1,253}[ \t]{0,8}(?:\.|\[dot\]|\(dot\)|\{dot\})[ \t]{0,8}[\p{L}]{2,63}

4. Save settings

Por último desde codex o claude hay que decirle que se conecte al MCP y cargue las herramientas y posteriormente reiniciar.

Algunas regex mas

(?iu)(?<![\p{L}\p{N}._%+-])[\p{L}\p{N}._%+!#$&\x27*=/^`{|}~-]{1,254}@[\p{L}\p{N}.-]{1,253}\.[\p{L}]{2,63}
(?i)(?<![a-z0-9_])(?:csrf(?:[_-]?token)?|xsrf(?:[_-]?token)?|_csrf|_token|authenticity_token|__RequestVerificationToken|javax\.faces\.ViewState)[ \t]{0,8}=[^&\s"\x27<>]{1,2048}
(?i)\\?"(?:csrf(?:[_-]?token)?|xsrf(?:[_-]?token)?|_csrf|_token|authenticity_token|__RequestVerificationToken|javax\.faces\.ViewState)\\?"\s{0,8}:\s{0,8}\\?"[^"\\\r\n]{1,2048}\\?"
(?i)<input\b[^>]{0,1024}\bname\s{0,8}=\s{0,8}(?:\\?["\x27])?(?:csrf(?:[_-]?token)?|xsrf(?:[_-]?token)?|_csrf|_token|authenticity_token|__RequestVerificationToken|javax\.faces\.ViewState)(?:\\?["\x27]|\s)[^>]{0,1024}>
(?im)(?:^|\\r\\n|\\n)(?:X-CSRF-Token|X-XSRF-Token|X-CSRFToken|CSRF-Token|X-Auth-Token|X-Api-Key)[ \t]{0,8}:(?:(?!\\r\\n|\\n)[^\r\n]){1,2048}
(?i)(?<![a-z0-9_])(?:email|e_mail|username|first_name|firstName|last_name|lastName|full_name|fullName|phone|phoneNumber|telephone|mobile|address|street|postal_code|postalCode|zip_code|date_of_birth|dateOfBirth|dob|dni|nie|nif|passport|ssn|iban|credit_card|cardNumber|cvv|cvc)[ \t]{0,8}=[^&\s"\x27<>]{1,2048}
(?i)\\?"(?:email|e_mail|username|first_name|firstName|last_name|lastName|full_name|fullName|phone|phoneNumber|telephone|mobile|address|street|postal_code|postalCode|zip_code|date_of_birth|dateOfBirth|dob|dni|nie|nif|passport|ssn|iban|credit_card|cardNumber|cvv|cvc)\\?"\s{0,8}:\s{0,8}(?:\\?"[^"\\\r\n]{1,2048}\\?"|[0-9][0-9 .+-]{0,63})
(?i)(?<![a-z0-9])(?:[0-9]{8}[a-z]|[xyz][0-9]{7}[a-z])(?![a-z0-9])
(?i)(?<![a-z0-9])ES[ \t]{0,2}[0-9]{2}(?:[ \t]{0,2}[0-9]){20}(?![a-z0-9]