ProfessionalCommunity Edition

Filtering the WebSockets history with Bambdas

• Last updated: December 3, 2024

• Read time: 2 Minutes

You can write Java-based Bambdas to create custom filters for your WebSockets history.

Two objects of the Montoya API are available to help you write your Bambdas:

• ProxyWebSocketMessage

• Utilities

To create a Bambda to filter your WebSockets history:

1. In the Proxy > WebSockets history tab, click the filter bar to open the WebSockets history filter window.

   The filter bar only appears when there is one or more messages in your WebSockets history.

2. In the WebSockets history filter window, click the Bambda mode tab.

3. Write your Bambda using Java.

4. Click Apply. This runs the Bambda and outputs any console output or compilation errors into the console. You must resolve any compilation errors before Burp can apply your Bambda.

5. Click Apply & close.

Burp compiles your Bambda and applies it to every item already logged in your WebSockets history, and to any future WebSockets traffic generated in this project.

Example Bambda

In the example below, we'll create a Bambda that filters the WebSockets history to show only items that meet the following criteria:

• The message must be sent from the server.

• The message payload length must be greater than 300 characters.

return message.payload().length() > 300 && message.direction() == Direction.SERVER_TO_CLIENT;

Converting filter settings to Bambdas

If you have already used Settings mode to configure a WebSockets history filter, you can convert these settings to a Bambda.

To convert your filter settings to a Bambda:

1. In the Proxy > WebSockets history tab, click the filter bar to open the WebSockets history filter window.

2. Make changes to the filter settings (if necessary).

3. At the bottom of the WebSockets history filter window, click Convert to Bambda.

Your filter is now converted into a Bambda, enabling you to customize it further using Java.