burpsuite/kaleido

Kaleido network traffic forwarding tool.

Kaleido(Scope)

Kaleido network traffic forwarding tool(api-gateway).
** I need more testing and improvement, don't use. **, _(*1)

Features

• Support GET, POST, PUT, DELETE, PATCH, SEARCH and More Request Methods.
• Support Added/Delete/Modify Http Headers(Request/Response).
• Support for Replay Request(Current)/Response(History).
• Support Added/Delete/Modify Cookies(Request/Response).
• Support Regular Expressions to Modify Request Url.
• Support Regular Expressions to Added/Delete/Modify Body(Request/Response).
• Support Patch Request/Response Json-Body(Does not support JSONP).
• Support Capture Request and Responses.
• Support for Remote Server Status-Code Responses.
• Support Response Body Size Limit(By byte).
• Support Regular Expressions to Added/Delete/Modify Request Params.
• Support for Allowing/Denying the Display of Remote Server Status-Code.
• ...

Install

composer install burpsuite/kaleido

{
  "require": {
    "burpsuite/kaleido": "^0.1.0090"
  }
}

Http

Usage

$dispatcher = FastRoute\simpleDispatcher(function(FastRoute\RouteCollector $r) {
    $r->addRoute(
        ['GET', 'POST', 'PUT', 'HEAD', 'OPTIONS', 'PATCH', 'SEARCH', 'DELETE'],
        '/kaleido/{taskId:[0-9a-f\-]+}/{url:[\w\:\/\-\.\_\%]+\??}{param:.*}',
        ['Kaleido\Http\Loader', 'listenHttp']
    );
    $r->addRoute(
        'GET', '/kaleido/{activity:\w+}/{objectId:\w+}',
        ['Kaleido\Http\Loader', 'replayHttp']
    );
});

Loader

{
  "loadType": "remote",
  "loadInfo": {
    "loadData": "http://localhost/kaleido_v3.json",
    "loadCache": {
      "type": "dynamic",
      "data": "redis_url",
      "interval": 86400
    }
  }
}

Capture

{
  "capType": "leancloud",
  "leancloud": {
    "appId": "pTPoK9Q7jGyTFpNXXXXXXXX-MdYXbMMI",
    "appKey": "uiTYApLfNDXXXXXXXXxEUTNx",
    "masterKey": "okrmXcXXXXXXXXUfKI7xzmUt",
    "apiServer": "https://us-api.leancloud.cn",
    "className": "TrafficCapture"
  }
}

Sample

[
  {
    "desc": "httpbin",
    "host": ["http://httpbin.org", "https://httpbin.org"],
    "method": ["get", "post", "put"],
    "handle": {
      "request": {
        "check_hostname": true,
        "check_method": true,
        "fix_urlencode": true,
        "enable_header": true,
        "enable_cookie": true,
        "maxSize": 250000,
        "url": {},
        "url_param": {},
        "form_param": {},
        "body": {},
        "body_patch": {},
        "cookie": {},
        "header": {
          "Cookie": null
        }
      },
      "response": {
        "allow_error": true,
        "enable_header": true,
        "enable_cookie": true,
        "body": {},
        "body_patch": {},
        "cookie": {},
        "header": {
          "Connection": null,
          "Transfer-Encoding": null,
          "Content-Length": null,
          "Access-Control-Allow-Origin": "*"
        }
      }
    }
  }
]

Socket

, _(*2)

Coming Soon

• Support Socket (react/socket).
• Support Stream (react/stream).
• Support Tag Replace.
• Support Capture to Redis.
• Support for More Exception Handling.
• ...