27 July, 2021

How to configure BurpelFish

How to configure BurpelFish
Alex Rodriguez
Author: Alex Rodriguez
Share:
I recently was doing a pentest and was continuously looking up translations for words, and thought “there has to be a better way…”. That is when I landed on BurpelFish, which adds a google translate context option to your BurpSuite’s right click. When I googled “how to set up BurpelFish” I couldn’t find anything, so I figured maybe this blog post will help others if they were curious on how to set it up.
 

Pre-reqs

You will need to install standalone jython: https://burpsuite.guide/runtimes/python/

Then you should be able to install the BurpelFish extension.

Setup Instructions

After you install BurpelFish from the Bapp store on your BurpSuite installation, it tells you to go to Google Cloud in order to set up your API key. This makes sense if you don’t already have a Google Cloud account setup and need to sign up for a free trial. We already had a Google Cloud account though, and it’s interface is like learning a different language (at least for me).

Finally we found the specific location inside of Google Cloud’s console, which was: https://console.cloud.google.com/apis/api/translate.googleapis.com/credentials

After that you just need to create an API key.

Example 1

Once you have the API key and already have BurpelFish installed, then you just need to go and select some text ( i.e. from your proxy history ). Right click it and follow these context menus.

AIx3bYlQChgx0ueogXYvo8T6M0ditKn5KOpUCATEo5RST7KQbe-lIpWu4_e3cABh4YPdAoe_30HCztkS4WOeVjm_o2LZvXDGrR7tj4IYssKLSzZ_ouZ175NKhuTUDNTQ3fjmETuq-1

After you select that you will get a small pop up asking for your API key.

Example 2

Paste in the API key you just created, and that’s it.

After you have completed the steps above, everything should start work. You should have a little pop-up that shows with the translated word.

Example 3

Afterwards you can just follow the same context menu selections every time you want to translate something.

AIx3bYlQChgx0ueogXYvo8T6M0ditKn5KOpUCATEo5RST7KQbe-lIpWu4_e3cABh4YPdAoe_30HCztkS4WOeVjm_o2LZvXDGrR7tj4IYssKLSzZ_ouZ175NKhuTUDNTQ3fjmETuq-1

If you have any issues with the plugin the repo’s PR page is here: https://github.com/PortSwigger/burpelfish/pulls

Bonus

Shout out to Jennifer, because she noticed you actually don’t have to use an API key to use this extension. You will be more limited in the amount of languages that are supported if you don’t add the API key.

Join the Professionally Evil newsletter

Sign Up

Related Resources