Arch Linux User Repository

I've tried to automatically script the update of Burpsuite on this repo : https://github.com/AkechiShiro/aur-burpsuite

Feel free to let me know any improvements, the CI runs every Monday at 10 A.M. UTC, this should help keep the package up to the latest early adopter release every week.

Commenting PKGBUILD file here is not recommended but if you like, use this one

I only changed the pkgver to 2022.12 and replaced sha256sums of .jar file to the one from (https://portswigger.net/burp/releases/professional-community-2022-12?requestededition=community)

you can do it yourself

NOTE that, in the link above 1. select Comunnity Edition from drop down menu 2. select JAR from the next drop down menu 3. click on show checksumd

# Maintainer: tux268 <tux268 AT tux268 DOT xyz>
# Comaintainer: dkasak <dkasak AT termina DOT org DOT uk>
# Contributor: nblock <nblock [/at\] archlinux DOT us>
# Contributor: DigitalPathogen <aur@digitalpathogen.co.uk>
# Contributor: daronin
# Contributor: kageurufu

pkgname=burpsuite
pkgver=2022.12
pkgrel=1
pkgdesc="An integrated platform for performing security testing of web applications (free edition)"
url="https://portswigger.net/burp/"
depends=('java-runtime>=17')
arch=('any')
license=('custom')
noextract=("${pkgname}-${pkgver}.jar")
source=("${pkgname}-${pkgver}.jar::https://portswigger.net/burp/releases/download?product=community&version=${pkgver}&type=Jar"
        LICENSE
        burpsuite.desktop
        icon64.png)
install=burpsuite.install
sha256sums=('2965b0e55e65dd78ae0706e90a3f5b9e6b53c95d74595c9e811c180f333ed352'
            'a1146672de7084a1cddc5b7dab4d18b3530c194bd6e45a2b0ac04b579751ca30'
            '950c61d7ce1257c21a4152abebb8da320d0206ceb59247d6c912903d1ed39fc8'
            'd31232a7dbdab9d5723f12aa25c52d13fd46ef2e8837a85fb9a08c3a7f151541')

package() {
  mkdir -p ${pkgdir}/usr/bin
  mkdir -p ${pkgdir}/usr/share/{applications,pixmaps,${pkgname},licenses/${pkgname}}

  cd ${srcdir}
  install -m644 ${pkgname}-${pkgver}.jar ${pkgdir}/usr/share/${pkgname}/${pkgname}.jar
  install -m644 LICENSE ${pkgdir}/usr/share/licenses/${pkgname}/
  install -m644 burpsuite.desktop ${pkgdir}/usr/share/applications/
  install -m644 icon64.png ${pkgdir}/usr/share/pixmaps/burpsuite.png

  # Create startup file for burpsuite.
  echo "#!/bin/sh" > ${pkgdir}/usr/bin/${pkgname}
  echo "exec \$JAVA_HOME/bin/java --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED -jar /usr/share/burpsuite/burpsuite.jar \$@" >> ${pkgdir}/usr/bin/${pkgname}
  chmod 755 ${pkgdir}/usr/bin/${pkgname}
}

# vim:set ts=2 sw=2 et:

@tux268 I notice that it was fixed starting from 2022.2.5-1 build 12599

@geordanex I can't reproduce the issue. However, the current version is 2022.3.6, do you also encounter the same issue with this version ?

@tux268 same error here version installed burpsuite-1:2022.2.5-1

Could not start Burp: java.lang.NullPointerException: Cannot invoke "jdk.internal.platform.CgroupInfo.getMountPoint()" because "anyController" is null

@tux268 I don't think it was your change... I tried without the option and with all those other flags. I start imagine that is something related to my hypervisor (proxmox) somehow.

@mostwantedduck It might be linked to a change I recently made in the PKGBUILD to switch to JDK17. I'm going to look into it and fix this issue ASAP. Thanks for letting me know

EDIT : I have removed the --illegal-access=permit flag and added --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED as suggested by Burp.

Recently I start having problem to run burpsuite... Tried to use other jdks but nothing worked.

That is what I have. It's a VM running on proxmox (not sure if it's relevant):

[mwd@manjaro-xfce jvm]$ sudo archlinux-java status
Available Java environments:
  java-11-openjdk
  java-17-openjdk (default)
  jdk-14
  jdk-17.0.2

[mwd@manjaro-xfce jvm]$ java -version
openjdk version "17.0.3" 2022-04-19
OpenJDK Runtime Environment (build 17.0.3+3)
OpenJDK 64-Bit Server VM (build 17.0.3+3, mixed mode)

[mwd@manjaro-xfce jvm]$ burpsuite
OpenJDK 64-Bit Server VM warning: Ignoring option --illegal-access=permit; support was removed in 17.0
Could not start Burp: java.lang.NullPointerException

[mwd@manjaro-xfce jvm]$ cat /usr/bin/burpsuite
#!/bin/sh

exec $JAVA_HOME/bin/java --illegal-access=permit -jar /usr/share/burpsuite/burpsuite.jar $@

Posted a video with the error if anyone is interested... https://www.youtube.com/watch?v=cUy_zgtmrpM

don't remove the flag --illegal-access=permit, just read the wiki

@dkasak @tux268 - Pls disregard my out-of-date flag for now. I missed that this version has been released to the early-adopter channel only.

Sorry for the noise.

@berrabe I haven't been able to reproduce this error. The link seems to work fine for me. Do you have any more input, so I can try to reproduce this ?