├── .github └── ISSUE_TEMPLATE │ ├── Bug_report.md │ └── Feature_request.md ├── .gitignore ├── CODE_OF_CONDUCT.md ├── LICENSE ├── README.md ├── burp-tabnabbing-extension.iml ├── pom.xml ├── src ├── main │ ├── java │ │ ├── burp │ │ │ └── BurpExtender.java │ │ └── com │ │ │ └── github │ │ │ └── adriancitu │ │ │ └── burp │ │ │ └── tabnabbing │ │ │ ├── parser │ │ │ ├── AbstractObserver.java │ │ │ ├── HTMLAnchorReaderObserver.java │ │ │ ├── HTMLResponseReader.java │ │ │ ├── IByteReader.java │ │ │ ├── IByteReaderObserver.java │ │ │ ├── JSWindowsOpenReaderObserver.java │ │ │ └── TabNabbingProblem.java │ │ │ ├── scanner │ │ │ ├── CustomScanIssue.java │ │ │ ├── IssueType.java │ │ │ ├── ScanStrategy.java │ │ │ └── ScannerCheck.java │ │ │ └── util │ │ │ └── HtmlByteArrayUtility.java │ └── resources │ │ ├── ScannerCheck.puml │ │ └── com │ │ └── github │ │ └── adriancitu.burp │ │ └── tabnabbing │ │ └── parser │ │ └── ObserverClassDiagram.puml └── test │ ├── java │ └── com │ │ └── github │ │ └── adriancitu │ │ └── burp │ │ └── tabnabbing │ │ ├── parser │ │ ├── HTMLAnchorReaderListenerTest.java │ │ ├── HTMLResponseReaderTest.java │ │ └── JSWindowsOpenReaderObserverTest.java │ │ ├── scanner │ │ ├── CustomScanIssueTest.java │ │ └── ScannerCheckTest.java │ │ └── util │ │ └── HtmlByteArrayUtilityTest.java │ └── resources │ ├── badHREFResponse.html │ ├── badHrefResponseAndBadJsResponse.html │ ├── badJSResponse.html │ ├── bigBadHREFResponse.html │ ├── bigGoodHREFResponse.html │ ├── bigHTMLFileWithNoHref.html │ ├── multipleBadHREFResponse.html │ └── realFileFromSlate.html └── tabnabbing-1.0-SNAPSHOT.jar /.github/ISSUE_TEMPLATE/Bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/.github/ISSUE_TEMPLATE/Bug_report.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/Feature_request.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/.github/ISSUE_TEMPLATE/Feature_request.md -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | /.idea/ 2 | /target/* 3 | -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/README.md -------------------------------------------------------------------------------- /burp-tabnabbing-extension.iml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/burp-tabnabbing-extension.iml -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/burp/BurpExtender.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/burp/BurpExtender.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/AbstractObserver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/AbstractObserver.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLAnchorReaderObserver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLAnchorReaderObserver.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLResponseReader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLResponseReader.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/IByteReader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/IByteReader.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/IByteReaderObserver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/IByteReaderObserver.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/JSWindowsOpenReaderObserver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/JSWindowsOpenReaderObserver.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/parser/TabNabbingProblem.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/parser/TabNabbingProblem.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/CustomScanIssue.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/CustomScanIssue.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/IssueType.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/IssueType.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/ScanStrategy.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/ScanStrategy.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/ScannerCheck.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/scanner/ScannerCheck.java -------------------------------------------------------------------------------- /src/main/java/com/github/adriancitu/burp/tabnabbing/util/HtmlByteArrayUtility.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/java/com/github/adriancitu/burp/tabnabbing/util/HtmlByteArrayUtility.java -------------------------------------------------------------------------------- /src/main/resources/ScannerCheck.puml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/resources/ScannerCheck.puml -------------------------------------------------------------------------------- /src/main/resources/com/github/adriancitu.burp/tabnabbing/parser/ObserverClassDiagram.puml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/main/resources/com/github/adriancitu.burp/tabnabbing/parser/ObserverClassDiagram.puml -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLAnchorReaderListenerTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLAnchorReaderListenerTest.java -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLResponseReaderTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/parser/HTMLResponseReaderTest.java -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/parser/JSWindowsOpenReaderObserverTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/parser/JSWindowsOpenReaderObserverTest.java -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/scanner/CustomScanIssueTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/scanner/CustomScanIssueTest.java -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/scanner/ScannerCheckTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/scanner/ScannerCheckTest.java -------------------------------------------------------------------------------- /src/test/java/com/github/adriancitu/burp/tabnabbing/util/HtmlByteArrayUtilityTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/java/com/github/adriancitu/burp/tabnabbing/util/HtmlByteArrayUtilityTest.java -------------------------------------------------------------------------------- /src/test/resources/badHREFResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/badHREFResponse.html -------------------------------------------------------------------------------- /src/test/resources/badHrefResponseAndBadJsResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/badHrefResponseAndBadJsResponse.html -------------------------------------------------------------------------------- /src/test/resources/badJSResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/badJSResponse.html -------------------------------------------------------------------------------- /src/test/resources/bigBadHREFResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/bigBadHREFResponse.html -------------------------------------------------------------------------------- /src/test/resources/bigGoodHREFResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/bigGoodHREFResponse.html -------------------------------------------------------------------------------- /src/test/resources/bigHTMLFileWithNoHref.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/bigHTMLFileWithNoHref.html -------------------------------------------------------------------------------- /src/test/resources/multipleBadHREFResponse.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/multipleBadHREFResponse.html -------------------------------------------------------------------------------- /src/test/resources/realFileFromSlate.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/src/test/resources/realFileFromSlate.html -------------------------------------------------------------------------------- /tabnabbing-1.0-SNAPSHOT.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AdrianCitu/burp-tabnabbing-extension/HEAD/tabnabbing-1.0-SNAPSHOT.jar --------------------------------------------------------------------------------