Skip to content

Inclusion Exclusion base Ruleset

Orsiris de Jong edited this page Mar 4, 2019 · 1 revision

Burp allows to set multiple inclusion / exclusion regex per client. It also allows to exclude particular file extensions from compression, which comes in handy on filetypes that are not compressible (archives, video and image formats...) in order to spare cpu time.

I have written a basic ruleset hierarchy as follows:

[incexc]
|
|---std_settings
|      |
|      |---audio_compressed
|      |---image_compressed
|      |---video_compressed
|      |---generic_compressed
|      |---generic_excluded_extensions
|      |---generic_exclusions
|---windows_settings
|---linux_settings

You may adapt the file std_settings to fit your needs, all other files should be safe to use in most cases.

In order to use it, just grab the files and put them into /etc/burp/clientconfdir/incexc and add the following to your client configuration file:

For linux clients

. incexc/std_settings
. incexc/linux_settings

For windows clients

. incexc/std_settings
. incexc/windows_settings

Ruleset may be found at https://github.com/deajan/linuxscripts/tree/master/burp/incexc Updates are more than welcome.