A Burp Extender plugin, that will deserialized java objects and encode them in JSON using the Xtream library.
Based in part on khai-tran's work but written from scratch to work with the new Extender API introduced in Burp-1.5.01
Few methods to locate the required jar files containing the classes we'll be deserializing.
- In case of a .jnlp file use jnpdownloader
- Locating jars in browser cache
- Looking for .jar in burp proxy history
Finally, create a "libs/" directory next to your burp.jar and put all the jars in it.
Download from releases page and load it in the Extender tab, the Output window will list all the loaded jars from ./libs/
Serialized Java content will automagically appear in the Java Object tab in appropriate locations (proxy history, interceptor, repeater, etc.)
Any changes made to the JSON will serialize back once you switch to a different tab or send the request.
Please note that if you mess up the JSON schema or edit an object in a funny way, the re-serialization will fail and the error will be displayed in the Dashboard tab
In case you need to add more JARs, right click anywhere and select "BurpJDSer-ng: Reload JARs"