A SysReptor plugin that provides a visual dashboard for analyzing Burp Suite Intruder CSV exports — detect Rate Limiting behavior, WAF blocks, throttling patterns, and response anomalies at a glance.
- Automatic CSV parsing — supports Burp Suite Intruder tab-separated exports
- RPS Gauge — visual throughput meter (requests per second)
- Response Integrity chart — breakdown of all status codes (2xx, 3xx, 4xx, 5xx)
- Latency time-series chart — per-request response time colored by status code
- Error & Timeout detection — counts HTTP 5xx errors and 504 timeouts
- Dashboard export — download the full dashboard as a PNG image
83d78a81-0950-4eef-ae14-d5ebacdf2cb4
- Backend: Django (SysReptor plugin system)
- Frontend: React 19 + TypeScript, Vite, Tailwind CSS, Recharts, html2canvas
Note: For the official SysReptor plugin documentation, refer to https://docs.sysreptor.com/setup/plugins/.
Note: If you are already using other plugins (e.g. built-in ones like
cyberchef), mounting a customplugins/directory will replace the container's internal plugins folder. You will need to copy those built-in plugins locally alongside this one so they continue to work.
-
Clone the repository directly into your SysReptor
plugins/folder:git clone https://github.com/leforense/sysreptor-ratewatch-plugin.git /path/to/sysreptor/plugins/ratewatchplugin
-
Build the frontend:
cd /path/to/sysreptor/plugins/ratewatchplugin/frontend npm install npm run buildThis outputs static files to
plugins/ratewatchplugin/static/. -
Create a
docker-compose.override.ymlin your SysReptordeploy/folder to mount the plugins directory into the container:services: app: volumes: - type: bind source: ./plugins target: /app/plugins read_only: true
-
Add the plugin to your SysReptor
ENABLED_PLUGINSsetting inapp.env:ENABLED_PLUGINS=ratewatchplugin -
Restart SysReptor. The RateWatch entry will appear in the main menu.
cd frontend
npm install
npm run dev # dev server at http://localhost:3000
npm run build # production build → ../static/- Run an Intruder attack in Burp Suite.
- After the attack, right-click the results table → Save results → Select all Columns → CSV.
- Upload the
.csvfile to the RateWatch dashboard.
Released into the public domain under the Unlicense. No attribution required.
Exporting:
Importing: