Skip to content

[Feature Request] Question about ACL usage

Hello Benjamin,

I have a problem I'm trying to solve regarding ACLs on Burp-UI. Today, I have two agents registered to burp-ui. My clients are named "client.customer.town.computer.local" and "server.customer.town.computer.local"

I've setup BASIC ACLs for my admins that look like the following in order to have them manage all clients.

{
    "agents": {
        "agent1": {
            "rw": [
                "client.*",
                "server.*"
            ]
        },
        "agent2": {
            "rw": [
                "client.*",
                "server.*"
            ]
        }
    }
}

Now I'd need to backup some other clients, which I'd like to exclude from the admins management. I'd like to keep the naming scheme, because other scripts (backup_tool_script) do some work on those depending on the namings.

Is there any way to add an exclusion list like the followng:

{
    "agents": {
        "agent1": {
            "rw": [
                "client.*",
                "server.*",
            "none": [
                "client.specific*",
            ]
        }
}

If not, I could probably just create another agent that uses the same burp server, but with different ACLs, but this might be overkill. Is there any obvious solution I didn't see ?

Best regards.

Edited by Orsirs de Jong