Prerequisites
You will need to install standalone Jython: Burp Suite Jython Runtime Guide Then you should be able to install the BurpelFish extension.Setup Instructions
After you install BurpelFish from the BApp Store on your Burp Suite installation, it tells you to go to Google Cloud in order to set up your API key. This makes sense if you don’t already have a Google Cloud account set up and need to sign up for a free trial. We already had a Google Cloud account though, and its interface is like learning a different language (at least for me). Finally we found the specific location inside of Google Cloud’s console, which was the Cloud Translation API credentials page. After that you just need to create an API key.
Paste in the API key you just created, and that’s it.
After you have completed the steps above, everything should start working. You should have a little popup that shows with the translated word.
Afterwards you can just follow the same context menu selections every time you want to translate something. If you have any issues with the plugin, the repo’s PR page is here.
Shout out to Jennifer, who noticed you actually don’t have to use an API key to use this extension. You will be more limited in the amount of languages that are supported if you don’t add the API key.
Need a penetration test on a multilingual application?
Our team tests web applications regardless of language, using custom tools and extensions to find vulnerabilities that automated scanners miss. Reach out to discuss a security assessment.
