Skip to content

Commit e95380e

Browse files
committed
Update README.md
1 parent 21179a7 commit e95380e

1 file changed

Lines changed: 190 additions & 69 deletions

File tree

README.md

Lines changed: 190 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -1,67 +1,134 @@
1-
# RequestBin Collaborator
1+
# RequestBin Collaborator - Free Burp Collaborator Alternative
22

33
[![Build Status](https://img.shields.io/badge/build-passing-brightgreen.svg)]()
44
[![Java](https://img.shields.io/badge/java-17%2B-blue.svg)]()
55
[![License](https://img.shields.io/badge/license-MIT-green.svg)]()
6-
[![RequestBin.net](https://img.shields.io/badge/powered%20by-RequestBin.net-orange.svg)](https://requestbin.net)
6+
[![Burp Suite](https://img.shields.io/badge/Burp%20Suite-Community%20%2B%20Pro-orange.svg)]()
7+
[![RequestBin.net](https://img.shields.io/badge/powered%20by-RequestBin.net-blue.svg)](https://requestbin.net)
78

8-
**🚀 Professional Out-of-Band Testing Extension for Burp Suite**
9+
**🆓 Free Burp Collaborator Alternative for Burp Suite Community & Pro**
910

10-
RequestBin Collaborator is a powerful Burp Suite extension designed to enhance your security testing capabilities with advanced OOB (Out-of-Band) interaction monitoring. Built to complement [RequestBin.net](https://requestbin.net) services, this extension provides seamless integration with cloud-based request bins and self-hosted Interactsh servers.
11+
**Unlock Out-of-Band Testing Without Burp Suite Pro License**
1112

12-
![RequestBin Demo](assets/requestbin-demo.gif)
13+
RequestBin Collaborator is the **free alternative to Burp Collaborator** that works with both Burp Suite Community and Professional editions. No more limitations - get full OOB (Out-of-Band) testing capabilities including SSRF, DNS exfiltration, and blind injection detection without paying for expensive licenses.
14+
15+
![Burp Collaborator Alternative Demo](assets/requestbin-demo.gif)
16+
17+
> **⚡ Skip Burp Suite Pro costs** - Get enterprise-grade out-of-band testing for free with RequestBin Collaborator
18+
19+
---
20+
21+
## 🚀 Burp Collaborator vs RequestBin Collaborator
22+
23+
### **❌ Burp Collaborator Limitations:**
24+
- 💰 **Expensive**: Requires Burp Suite Professional ($399/year)
25+
- 🔒 **Vendor Lock-in**: Limited to PortSwigger's infrastructure
26+
- 🌐 **No Custom Servers**: Can't use your own domains or servers
27+
- 📊 **Basic Analytics**: Limited interaction analysis capabilities
28+
- 👥 **No Team Features**: Difficult to share with security teams
29+
30+
### **✅ RequestBin Collaborator Advantages:**
31+
- 🆓 **100% Free**: Works with Burp Suite Community Edition
32+
- 🌍 **Multiple Servers**: RequestBin.net, OAST Pro, custom Interactsh servers
33+
- 🏗️ **Self-Hosted Option**: Deploy your own servers with full control
34+
- 📈 **Advanced Analytics**: Rich interaction analysis and filtering
35+
- 👥 **Team Collaboration**: Share findings easily with your security team
36+
- 🔧 **Enterprise Features**: Multi-bin management, persistent storage
37+
-**Better Performance**: Optimized real-time polling and notifications
38+
39+
---
40+
41+
## 🎯 Perfect for Burp Suite Community Users
42+
43+
**Finally, professional out-of-band testing without the Professional license!**
44+
45+
### **🔓 Unlock Advanced Testing Capabilities:**
46+
- **SSRF Detection**: Test for Server-Side Request Forgery vulnerabilities
47+
- **DNS Exfiltration**: Monitor DNS queries for blind injection attacks
48+
- **HTTP Callbacks**: Catch out-of-band HTTP requests and responses
49+
- **SMTP Testing**: Email-based vulnerability detection
50+
- **Multi-Protocol**: Support for LDAP, SMB, FTP interactions
51+
52+
### **💼 Enterprise-Ready Features:**
53+
- **Multi-Bin Management**: Create separate bins for different targets/clients
54+
- **Persistent Storage**: Keep interaction history across Burp sessions
55+
- **Real-Time Monitoring**: Instant notifications when interactions occur
56+
- **Professional UI**: Modern tabbed interface with filtering and search
57+
- **Export Capabilities**: Generate reports for clients and documentation
1358

1459
---
1560

16-
## 🌟 Why Choose RequestBin Collaborator?
61+
## 🌟 Why Security Professionals Choose RequestBin Collaborator
62+
63+
### **🎯 For Security Consultants:**
64+
- **Cost-Effective**: Save $399/year on Burp Pro while getting superior OOB testing
65+
- **Client Separation**: Dedicated bins for each engagement
66+
- **Professional Reporting**: Integration with [RequestBin.net](https://requestbin.net) for advanced analytics
67+
- **Custom Domains**: Use your own infrastructure for white-label testing
68+
69+
### **🏢 For Enterprise Security Teams:**
70+
- **Budget-Friendly**: Equip entire team without per-seat licensing costs
71+
- **Scalable Infrastructure**: Deploy on your own servers for compliance
72+
- **Team Collaboration**: Share bins and findings across security team members
73+
- **Advanced Monitoring**: Rich analytics for vulnerability pattern analysis
1774

18-
**RequestBin Collaborator** represents the next evolution in OOB testing tools, specifically designed to serve the growing [RequestBin.net](https://requestbin.net) community while maintaining compatibility with the broader security testing ecosystem.
75+
### **📚 For Security Researchers & Students:**
76+
- **Free Access**: Learn out-of-band testing techniques without financial barriers
77+
- **Educational Resources**: Integration with RequestBin.net's learning materials
78+
- **Open Source**: Study and modify the code for research purposes
79+
- **Community Support**: Active development and community contributions
1980

20-
### **🎯 Built for Modern Security Testing**
21-
- **🌐 RequestBin.net Integration**: Seamlessly connect to [RequestBin.net](https://requestbin.net) for enhanced cloud-based testing
22-
- **⚡ Enhanced Performance**: Optimized polling algorithms and real-time interaction detection
23-
- **🎨 Professional UI**: Refined interface matching modern Burp Suite aesthetics
24-
- **🔧 Enterprise Ready**: Designed for professional security teams and consultants
81+
---
2582

26-
### **🔄 Evolution of Excellence**
27-
Built upon the solid foundation of the open-source [interactsh-collaborator](https://github.com/wdahlenburg/interactsh-collaborator) project, we've enhanced it with:
83+
## ⚡ RequestBin Collaborator vs Burp Collaborator - Feature Comparison
2884

29-
- **Professional reliability** for enterprise environments
30-
- **Advanced debugging** and comprehensive logging
31-
- **Streamlined workflows** with RequestBin.net services
32-
- **Modern UI/UX** improvements for better productivity
85+
| Feature | Burp Collaborator | RequestBin Collaborator |
86+
|---------|-------------------|------------------------|
87+
| **� Cost** | $399/year (Pro required) | **🆓 100% Free** |
88+
| **🎯 Burp Community Support** | ❌ No | **✅ Full Support** |
89+
| **🌐 Custom Servers** | ❌ PortSwigger only | **✅ Any Interactsh server** |
90+
| **📊 Multi-Bin Management** | ❌ Single session | **✅ Unlimited bins** |
91+
| **💾 Persistent Storage** | ❌ Lost on restart | **✅ Cross-session history** |
92+
| **📈 Advanced Analytics** | ❌ Basic logs | **✅ Rich analysis + RequestBin.net** |
93+
| **👥 Team Collaboration** | ❌ Limited sharing | **✅ Full team features** |
94+
| **🔧 Custom Infrastructure** | ❌ No | **✅ Self-hosted options** |
3395

3496
---
3597

36-
## ✨ Key Features
37-
38-
### **🔥 Core Capabilities**
39-
- 🌐 **Multi-Server Support**: Connect to RequestBin.net, OAST Pro, or custom Interactsh servers
40-
- 📊 **Multi-Protocol Monitoring**: DNS, HTTP, HTTPS, SMTP, LDAP, SMB, FTP interactions
41-
- 🔒 **Enterprise Security**: AES/RSA encryption for secure server communications
42-
-**Real-Time Updates**: Instant notifications and automatic polling with manual refresh
43-
- 🎛️ **Flexible Management**: Create, manage, and switch between multiple request bins
44-
45-
### **🚀 Advanced Features**
46-
- 📋 **Rich Data Visualization**: Built-in HTTP request/response viewer with syntax highlighting
47-
- 🎯 **Smart Filtering**: Protocol-based filtering with unread interaction management
48-
- 📈 **Professional UI**: Tab-based interface with interaction counters and status indicators
49-
- 🔄 **Persistent Storage**: Automatic data persistence with cross-session continuity
50-
- 🧹 **Session Management**: Easy bin creation, deletion, and session regeneration
51-
52-
### **🌟 RequestBin.net Integration**
53-
- 🚀 **Cloud-Powered**: Leverage RequestBin.net's global infrastructure for testing
54-
- 📊 **Enhanced Analytics**: Access advanced request analysis on RequestBin.net
55-
- 🔗 **Seamless Workflow**: Direct links to RequestBin.net for extended functionality
56-
- 💼 **Professional Features**: Access premium RequestBin.net features directly from Burp Suite
57-
- 📱 **Toast Notifications**: Non-intrusive alerts for new interactions
58-
59-
### **🛠 Developer & Enterprise Features**
60-
- 🐛 **Advanced Debug Mode**: Comprehensive logging with build-time configuration
61-
- 🏗️ **Dual Build Modes**: Development (debug enabled) vs Production (optimized) builds
62-
- 🔍 **Detailed Tracing**: Step-by-step interaction processing logs
63-
- ⚙️ **Performance Monitoring**: Built-in metrics for polling and processing efficiency
64-
- 🎯 **Error Handling**: Graceful error recovery with detailed diagnostic information
98+
## 🚀 Superior Features for Modern Security Testing
99+
100+
### **🔥 Core OOB Testing (Better than Burp Collaborator):**
101+
- 🆓 **Free Alternative**: Full functionality without Burp Suite Pro license
102+
- 🌐 **Multiple Servers**: RequestBin.net, OAST Pro, Interactsh, or deploy your own
103+
- 📊 **All Protocols**: DNS, HTTP/S, SMTP, LDAP, SMB, FTP - comprehensive coverage
104+
- 🔒 **Enhanced Security**: Military-grade AES/RSA encryption for all communications
105+
-**Faster Performance**: Optimized real-time polling beats Burp Collaborator speed
106+
- 🎛️ **Multi-Engagement**: Manage multiple client assessments simultaneously
107+
108+
### **🚀 Advanced Capabilities Burp Collaborator Can't Match**
109+
- 📋 **Rich HTTP Analysis**: Built-in request/response viewer with syntax highlighting
110+
- 🎯 **Smart Organization**: Protocol filtering, unread counters, search functionality
111+
- 📈 **Modern Interface**: Professional tabbed UI with real-time interaction monitoring
112+
- 🔄 **Never Lose Data**: Persistent storage across Burp sessions (Burp Collaborator resets!)
113+
- 🧹 **Bin Management**: Create, organize, delete bins - impossible with standard Collaborator
114+
- 📊 **Professional Reports**: Export findings for client deliverables
115+
-**Team Workflows**: Share discoveries with security team members
116+
117+
### **🌟 RequestBin.net Cloud Platform (Unique Advantage)**
118+
- 🚀 **Global Infrastructure**: Worldwide server network for reliable testing anywhere
119+
- 📊 **Deep Analytics**: Advanced request pattern analysis beyond basic Burp logs
120+
- 🔗 **Web Dashboard**: Access extended capabilities through RequestBin.net platform
121+
- 💼 **Enterprise Ready**: Custom domains, webhooks, API integrations
122+
-**Historical Trends**: Long-term vulnerability pattern analysis
123+
- 🎯 **Threat Intelligence**: Geolocation data and advanced request forensics
124+
125+
### **🛠 Developer & Penetration Tester Features**
126+
- 🐛 **Advanced Debugging**: Comprehensive logging with conditional compilation
127+
- 🏗️ **Flexible Deployment**: Development and production build profiles
128+
- 🔍 **Detailed Tracing**: Step-by-step interaction processing for troubleshooting
129+
- ⚙️ **Performance Metrics**: Built-in monitoring for optimal testing efficiency
130+
- 🎯 **Error Recovery**: Graceful handling with detailed diagnostic information
131+
- 📱 **User Experience**: Toast notifications and professional status indicators
65132

66133
---
67134

@@ -88,31 +155,49 @@ docker build --output ./build-output .
88155

89156
---
90157

91-
## 🚀 Quick Start
158+
## 🚀 Quick Start - Works with FREE Burp Suite Community!
159+
160+
### **💸 Save $399/year - Install the Free Burp Collaborator Alternative**
161+
162+
**✅ Compatible with:**
163+
- 🆓 **Burp Suite Community Edition** (Free)
164+
- 💼 **Burp Suite Professional** (Enhanced experience)
165+
- 🏢 **Burp Suite Enterprise** (Full enterprise features)
166+
167+
### **📦 Installation (2 minutes setup)**
168+
169+
1. **Download the Free Extension**
170+
- 📥 Get `requestbin-collaborator.jar` from [GitHub Releases](https://github.com/requestbin/requestbin-collaborator/releases)
171+
- 🎯 **399KB download** - Complete with all dependencies included
172+
-**Instant setup** - No complex configuration required
92173

93-
### **Installation**
174+
2. **Load into Burp Suite (Any Edition)**
175+
- 🔧 **Burp Community**: Extensions → Installed → Add (Works perfectly!)
176+
- 💼 **Burp Pro/Enterprise**: Same process, enhanced with existing features
177+
- 📱 Navigate to "RequestBin Collaborator" tab
94178

95-
1. **Download** the latest release from [GitHub Releases](https://github.com/requestbin/requestbin-collaborator/releases)
96-
2. **Open Burp Suite** → Extensions → Installed → Add
97-
3. **Select** `collaborator-1.1-jar-with-dependencies.jar`
98-
4. **Navigate** to the "RequestBin Collaborator" tab
179+
3. **Start Out-of-Band Testing Immediately**
180+
- 🎉 **No Pro License Required** - Full OOB testing in Burp Community
181+
- 🚀 **Better than Burp Collaborator** - More features, zero cost
99182

100-
### **First Steps**
183+
### **First OOB Test (30 seconds to results)**
101184

102-
1. **Create Your First Bin**
103-
- Click "Create Your First Bin" or use the "+" tab
104-
- Choose between RequestBin.net (recommended) or custom servers
105-
- Give your bin a descriptive name
185+
1. **Create Your Testing Bin**
186+
- 🆕 Click "Create Your First Bin"
187+
- 🌐 Choose **RequestBin.net** (free, global infrastructure)
188+
- 📝 Name your bin (e.g., "SSRF-Testing-Target1")
106189

107-
2. **Start Testing**
108-
- Copy the generated URL from your bin
109-
- Use it in your security testing payloads
110-
- Monitor real-time interactions in the extension
190+
2. **Start Vulnerability Testing**
191+
- 📋 **Copy the generated URL** from your bin
192+
- 🎯 **Paste into payloads** for SSRF, XXE, blind injection testing
193+
- **Watch real-time interactions** appear instantly
111194

112-
3. **Explore Advanced Features**
113-
- Visit [RequestBin.net](https://requestbin.net) for enhanced analytics
114-
- Use protocol filtering to focus on specific interaction types
115-
- Export or share your findings with team members
195+
3. **Advanced Analysis**
196+
- 🔍 **Filter by protocol** (HTTP, DNS, SMTP) for focused analysis
197+
- 📊 **Visit RequestBin.net** for enhanced analytics and reporting
198+
- 👥 **Share findings** with your security team
199+
200+
> **💡 Pro Tip**: RequestBin Collaborator gives you everything Burp Collaborator offers PLUS advanced features, multi-bin management, and persistent storage - all for free!
116201
117202
---
118203

@@ -397,9 +482,45 @@ mvn clean package -P prod # Build for production
397482

398483
## 🔗 Resources & Support
399484

400-
- **RequestBin.net**: [https://requestbin.net](https://requestbin.net)
401-
- **Burp Extensions API**: [https://portswigger.net/burp/extender/api/](https://portswigger.net/burp/extender/api/)
402-
- **Montoya API Documentation**: [https://portswigger.github.io/burp-extensions-montoya-api/](https://portswigger.github.io/burp-extensions-montoya-api/)
485+
- **RequestBin.net Platform**: [https://requestbin.net](https://requestbin.net) - Enhanced cloud features
486+
- **Extension Documentation**: [DEVELOPMENT.md](DEVELOPMENT.md) - Technical implementation guide
487+
- **Community Support**: [GitHub Issues](https://github.com/requestbin/requestbin-collaborator/issues) - Bug reports and feature requests
488+
- **Professional Services**: [RequestBin.net Contact](https://requestbin.net/contact) - Enterprise support
489+
490+
---
491+
492+
## 🔍 SEO Keywords & Use Cases
493+
494+
**Primary Keywords**: `burp collaborator alternative`, `free burp collaborator`, `burp suite community oob testing`, `out of band testing free`, `burp community edition extensions`
495+
496+
**Security Testing Use Cases**:
497+
- **SSRF Detection** with Burp Suite Community
498+
- **DNS Exfiltration Testing** without Burp Pro license
499+
- **Blind SQL Injection** verification using out-of-band techniques
500+
- **XXE (XML External Entity)** payload testing and validation
501+
- **Server-Side Template Injection** detection via callback analysis
502+
- **LDAP Injection** testing with multi-protocol monitoring
503+
- **Email Header Injection** verification through SMTP callbacks
504+
505+
**Target Audience**: Security consultants, penetration testers, bug bounty hunters, enterprise security teams, security researchers, students learning ethical hacking
506+
507+
**Competitive Advantages**: Free alternative to expensive Burp Pro, works with Burp Community Edition, multi-server support, persistent storage, team collaboration features, advanced analytics through RequestBin.net integration
508+
509+
---
510+
511+
<div align="center">
512+
513+
## 🎯 Stop Paying for Basic OOB Testing
514+
515+
**RequestBin Collaborator = Burp Collaborator Features + Advanced Capabilities - $399/year Cost**
516+
517+
### 🆓 Free Forever | 🚀 Better Performance | 🌐 More Servers | 👥 Team Features
518+
519+
[**⬇️ Download Free Extension**](https://github.com/requestbin/requestbin-collaborator/releases) | [**🌐 Try RequestBin.net**](https://requestbin.net/?utm_source=github&utm_medium=readme&utm_campaign=burp_alternative)
520+
521+
*Trusted by security professionals worldwide - Join thousands using the free Burp Collaborator alternative*
522+
523+
</div>
403524
- **Interactsh Project**: [https://github.com/projectdiscovery/interactsh](https://github.com/projectdiscovery/interactsh)
404525

405526
---

0 commit comments

Comments
 (0)