Skip to content

Transparent-Browser.md

Latest commit

 

History

History
56 lines (42 loc) · 2.44 KB

Transparent-Browser.md

File metadata and controls

56 lines (42 loc) · 2.44 KB
Raw

PWN::Plugins::TransparentBrowser

Watir + Selenium wrapper that gives you a real Chrome/Firefox - headless or visible - with proxy support, DevTools protocol access, and cookie/console capture. It's the traffic source for BurpSuite, the engine under every PWN::WWW driver, and the agent's go-to for anything JS-heavy.

Install: pwn setup --profile web - chromium · geckodriver · tor · nokogiri headers. See Installation.

Open

b = PWN::Plugins::TransparentBrowser.open(
  browser_type: :headless,           # :chrome | :firefox | :headless | :rest
  proxy:        'http://127.0.0.1:8080',
  with_devtools: true
)
b[:browser].goto 'https://target'
b[:browser].text_field(name: 'q').set 'pwn'

Useful bits

b[:browser].cookies.to_a
b[:browser].execute_script('return document.title')
b[:devtools].send_cmd('Network.enable')
PWN::Plugins::TransparentBrowser.dump_links(browser_obj: b)
PWN::Plugins::TransparentBrowser.close(browser_obj: b)

:rest mode

browser_type: :rest returns a RestClient-backed object with the same proxy plumbing - for APIs where a full browser is overkill.

Agent integration - Extrospection's eyes

PWN::AI::Agent::Extrospection drives this plugin (:headless, :rest fallback) as its web sense organ - the counterpart to probe_rf's ears:

Agent tool Uses TransparentBrowser to...
extro_snapshot(sections: %i[web]) → probe_web Fingerprint config-declared web_anchors: status · title · meta[generator] · SHA-256 of rendered DOM text · TLS cert fp/notAfter · optional screenshot
extro_watch(url:, selector:) Passive change-detection on a target page - re-hash the rendered DOM and diff vs the prior :web observation
extro_verify(claim:, kind:) Proactive self fact-check - render NVD/CVE.org, rubygems/PyPI, a cited URL, or DuckDuckGo HTML and return :confirmed / :refuted / :unknown. :refuted → Mistakes.record(tool:'assumption', ...)
revalidate_memory (cron) Garbage-collect stale PWN::Memory :fact entries by re-verify()ing every one containing a CVE / version / URL

All four honor proxy: (Burp / tor) so attribution stays controlled, reuse one browser handle across anchors, and close in an ensure. See Extrospection for the full loop.

← Home · BurpSuite · WWW · Extrospection