Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Berserko not adding headers in Burp 2020.4 #6

Closed
bshr opened this issue May 11, 2020 · 4 comments
Closed

Berserko not adding headers in Burp 2020.4 #6

bshr opened this issue May 11, 2020 · 4 comments

Comments

@bshr
Copy link

bshr commented May 11, 2020

Berserko doesn't seem to work in latest Burp - no headers are added, and the following exception appears in error output:
java.lang.ClassNotFoundException: com.sun.security.jgss.ExtendedGSSContext
@rtt-ncc
Copy link
Collaborator

rtt-ncc commented May 11, 2020

Thanks for reporting this, I have been able to reproduce.
Looks like some Kerberos-related classes may have been removed again from the JRE shipped with Burp, as happened before - see #5.
Investigating further now...

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Jun 5, 2020

Have tracked this down to the jdk.security.jgss module not being present in Burp's OpenJDK JRE, and reported this to Portswigger. As it says in the updated README, Berserko should work if Burp is launched with a full JRE rather than the bundled version.

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Jul 6, 2020

Fixed in Burp v2020.5.1.
Closing this issue.

@rtt-ncc rtt-ncc closed this as completed Jul 6, 2020
@bshr
Copy link
Author

bshr commented Jul 6, 2020

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bshr @rtt-ncc