Semgrepper

Prerequsites: The extension requires Semgrep CLI to be installed in your machine.

The current project provides a Burp Suite extension to allow users to include Semgrep results to extend the checks in use by the passive scanner. By visiting repositories that collect Semgrep rules, it is possible to verify the large number of rules related to the front-end environment written by the community.

By using this extension, Burp Suite users can include the Semgrep rules YAML files and define the scope of the analysis.

Main features:

• multiple tabs to use different Semgrep rules with different scopes
• select files or directories containing Semgrep rules in YAML format
• define a scope by specifing what can be or not be present in the response header/body
• deactivate the checks without unloading the plugin