burplabs is a modular, Python-based CLI tool that automates solving labs from PortSwigger Web Security Academy.
Its like like netexec, but made for web apps.
Basically, this is a python package named 'burplabs' which is an PortSwigger's Web Security Academy labs soluction in the form of python script. Each script includes the lab's name, proxy settings, and step-by-step solution, as well as any additional notes.
It currently has 148/230 labs (excluding expert labs) and I am adding rest of the labs daily.
This not something new but this helped me to get better with Python Scripting and I adjusted many other things. I recommend to try this when you know how lab is solved and just want to solve it. Please do not use this before understanding the concepts.
- CLI interface
- Modular architecture – each lab is a standalone Python file
- Custom Proxy and No Proxy also support (
--proxy,--no-proxy) - Docker-compatible
- Easily extensible - add your own code if you want!
Windows (powershell)
python -m venv burplabs-venv
.\burplabs-venv\scripts\Activate.ps1
pip install burplabsgit clone https://github.com/spbavarva/portswigger-labs-scripts.git
cd portswiggerlab
pip install .(Docker will be added soon)
burplabs -h
burplabs --list-labsburplabs --interactiveand then just follow the steps. You can even enter custom proxy when it prompts or if you want to use burp proxy then just open burp and hit 'Y' when it prompts for default proxy to get requests on your burp.
Or you can hit 'n' when it prompts and you don't need to open burp at all.
To add a new lab:
- Create a new file in
burplabs/labs/name-of-the-folder, e.g.sql_lab3.py - It must define a
run(url, payload, proxies=None)function - That’s it! The lab will be auto-detected and usable like:
portswiggerlab sql_lab3 --url ... --payload ...Credit to Rana Khalil for inspiring me for this!
Built by Sneh aka mystic_mido Portfolio: snehbavarva.com If you like it, give it a ⭐ on GitHub! That will really helps a lot to motivate me and show the significance of this small project. Thank you!
MIT License