<commit_before>Lair Burp Extension
===================

The Lair Burp Extension is exactly what it sounds like - a Burp Suite Extension used to import individual scan issues into a remote Lair project.

Lair (https://github.com/fishnetsecurity/Lair) is an application for collaborative management of diverse information associated with pentests. Although a Burp Drone already exists to consume Burp XML files (https://github.com/fishnetsecurity/Lair-Drones), being able to perform on-demand imports of individual issues directly from Burp makes tracking the issues a little more manageable.

## Features
* Integrates with an existing Lair MongoDB instance over plaintext or SSL
* Straightforward configuration and usage
* Burp scan results context menu allows one-click export of a Burp issue to a Lair project
* Creates new ports and vulnerabilities in Lair project if not currently present during import

## Limitations
* Cannot resolve DNS names via Burp-specific configuration (e.g. SOCKS proxy, host list)
* Setup to use SSL with MongoDB requires a few additional steps
* Project and host must exist in Lair project - they will not be created dynamically by the extension

## Usage
* Enable the extension in Burp
* Go to the "Lair Configuration" tab and enter the project id and the Mongo URL
* Perform passive/active scans in Burp
* Go to: Scanner > Results
* Right-click the desired scan issue and click "Send to Lair"
* Check the "Alerts" tab for success/fail messages

## Installation

* Download dependencies

  Lair: [GitHub Project](https://github.com/fishnetsecurity/Lair)

  Burp: [Portswigger.net](http://portswigger.net/burp/download.HTML)

  MongoDB: [Java Driver](http://central.maven.org/maven2/org/mongodb/mongo-java-driver/2.12.1/mongo-java-driver-2.12.1.jar)

  Lair Burp Extension: [Latest Release](www.example.com)
  
* If the Lair MongoDB instance utilizes SSL (recommended) then you must perform the following to setup a Java keystore:<commit_msg>Updated link to release versions.<commit_after>Lair Burp Extension
===================

The Lair Burp Extension is exactly what it sounds like - a Burp Suite Extension used to import individual scan issues into a remote Lair project.

Lair (https://github.com/fishnetsecurity/Lair) is an application for collaborative management of diverse information associated with pentests. Although a Burp Drone already exists to consume Burp XML files (https://github.com/fishnetsecurity/Lair-Drones), being able to perform on-demand imports of individual issues directly from Burp makes tracking the issues a little more manageable.

## Features
* Integrates with an existing Lair MongoDB instance over plaintext or SSL
* Straightforward configuration and usage
* Burp scan results context menu allows one-click export of a Burp issue to a Lair project
* Creates new ports and vulnerabilities in Lair project if not currently present during import

## Limitations
* Cannot resolve DNS names via Burp-specific configuration (e.g. SOCKS proxy, host list)
* Setup to use SSL with MongoDB requires a few additional steps
* Project and host must exist in Lair project - they will not be created dynamically by the extension

## Usage
* Enable the extension in Burp
* Go to the "Lair Configuration" tab and enter the project id and the Mongo URL
* Perform passive/active scans in Burp
* Go to: Scanner > Results
* Right-click the desired scan issue and click "Send to Lair"
* Check the "Alerts" tab for success/fail messages

## Installation

* Download dependencies

  Lair: [GitHub Project](https://github.com/fishnetsecurity/Lair)

  Burp: [Portswigger.net](http://portswigger.net/burp/download.HTML)

  MongoDB: [Java Driver](http://central.maven.org/maven2/org/mongodb/mongo-java-driver/2.12.1/mongo-java-driver-2.12.1.jar)

  Lair Burp Extension: [Latest Release](https://github.com/djkottmann/Lair-Burp-Extension/releases)
  
* If the Lair MongoDB instance utilizes SSL (recommended) then you must perform the following to setup a Java keystore:
{'fraction_non_alphanumeric': 0.07533050636068846, 'fraction_numerical': 0.004489897730107259, 'mean_word_length': 4.712250712250713, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 5, 'https://': 7, 'lorem ipsum': 0, 'www.': 1, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2906559', 'n_tokens_mistral': 1113, 'n_tokens_neox': 1049, 'n_words': 491}