pkgs/tools/networking/burpsuite/default.nix

   1 { lib, stdenv, fetchurl, jdk11, runtimeShell, unzip, chromium }:
   2
   3 stdenv.mkDerivation rec {
   4   pname = "burpsuite";
   5   version = "2021.4.2";
   6
   7   src = fetchurl {
   8     name = "burpsuite.jar";
   9     urls = [
  10       "https://portswigger.net/Burp/Releases/Download?productId=100&version=${version}&type=Jar"
  11       "https://web.archive.org/web/https://portswigger.net/Burp/Releases/Download?productId=100&version=${version}&type=Jar"
  12     ];
  13     sha256 = "034c9d0a7e0b5e7b1b286949c6b31b475ff2a15e75f1230ccc07e236fc61d2aa";
  14   };
  15
  16   dontUnpack = true;
  17   dontBuild = true;
  18   installPhase = ''
  19     runHook preInstall
  20
  21     mkdir -p $out/bin
  22     echo '#!${runtimeShell}
  23     eval "$(${unzip}/bin/unzip -p ${src} chromium.properties)"
  24     mkdir -p "$HOME/.BurpSuite/burpbrowser/$linux64"
  25     ln -sf "${chromium}/bin/chromium" "$HOME/.BurpSuite/burpbrowser/$linux64/chrome"
  26     exec ${jdk11}/bin/java -jar ${src} "$@"' > $out/bin/burpsuite
  27     chmod +x $out/bin/burpsuite
  28
  29     runHook postInstall
  30   '';
  31
  32   preferLocalBuild = true;
  33
  34   meta = with lib; {
  35     description = "An integrated platform for performing security testing of web applications";
  36     longDescription = ''
  37       Burp Suite is an integrated platform for performing security testing of web applications.
  38       Its various tools work seamlessly together to support the entire testing process, from
  39       initial mapping and analysis of an application's attack surface, through to finding and
  40       exploiting security vulnerabilities.
  41     '';
  42     homepage = "https://portswigger.net/burp/";
  43     downloadPage = "https://portswigger.net/burp/freedownload";
  44     license = licenses.unfree;
  45     platforms = jdk11.meta.platforms;
  46     hydraPlatforms = [];
  47     maintainers = with maintainers; [ bennofs ];
  48   };
  49 }