Burp Extensions - Page 23 - Burp Suite User Forum

How can I move burp extension folder elswhere ?

My username on this computer has a non ascii character in it, this causes problems to load any python extensions. I can't change my username on the computer (company policy T^T) so the only for me to load any python...

Python extension works with new header but unable to replace existing header?

Hey all, I was wondering if I could have some help with this extension. I have been able to pull my existing Cookie header, as well as successfully modify it. However the modification anywhere. It does not appear in the...

Log4Shell Scanner & Log4Shell Everywhere

Hi, I configure Log4Shell Scanner & Log4Shell Everywhere addon in my burpsuite professional to detect the log4j vulnerability. Once after craw & audit completed for the log4j vulnerable application, I couldn't found the...

Match the string and grep entry line

Hello community, I need small help,if I give a string,then match the string in response and show the total affected line. For example:aws_key match I need to write my tool, I need help.

Example of replacing and or adding a cookie via Burp Extender in Python?

Hey all, relatively new to Burp extensions. I've been trying to find an example of Burp Extender Python snippet that adds a custom Cookie either to every request or to the cookie jar. Does anyone have any Python code...

how to load request[]

mycode: byte[] request = callbacks.getHelpers().stringToBytes(Config.CSRF_REQUEST); IRequestInfo requestInfo = callbacks.getHelpers().analyzeRequest(request); List<String> header_list =...

Allow Extensions to Bypass Global Timeout

Hi, we're testing a system that does not send a response on successful exploitation. In ActiveScan the Status changes to "Errors: request timeout" and the vulnerability isn't reported. When using a modified...

Log4Shell and Burp "Enterprise edition"

Hi, does anyone managed to get the Log4Shell extension to work on Burp Enterprise Edition ? (not Burp Professional). I can upload the plugin to my BE server, upload the scanning profile...

Weird behavior while setting request

Hi, I made an extension to add a custom header to every request, but it seems that it is breaking a lot of pages. An example is those one click captchas, but i also break a lot os SPAs. I want to get some help on how i...

stringToBytes method outputting invalid/incorrect characters

First reported here https://github.com/synfron/ReshaperForBurp/issues/15#issuecomment-1002476347, a user reported that text they entered isn't being properly outputted in Burp Suite. It is outputting with invalid/incorrect...

Log4Shell and Burp "Enterprise edition"

Hi, does anyone managed to get the Log4Shell extension to work on Burp Enterprise Edition ? (not Burp Professional). I can upload the plugin to my BE server, upload the scanning profile...

How to view audit requests generated by Collaborator Everywhere?

I would like to inspect those requests sent by Collaborator Everywhere extension to see whether it works or not. I concern this issue since I cannot get any access log in my Apache2 server used to test (forensic_log mod is...

Log4Shell Scanner and Log4Shell Everywhere

Hello Team, I tried to install Log4Shell Scanner and Log4Shell Everywhere extensions using BApp Store in Burp Extender to test the log4j vulnerability. I have tried the below process: 1. New Scan -> Scan details ->...

Turbo Intruder

Hello team, I'm practicing the upload file vulnerabilities labs now and i tried to solve it with introduce solution but i still getting 400 errors back at the turbo intruder and can't achieve the secret. The lab:"Web...

Add extension to active scan

Hi everyone, Can I add/edit an active scan payloads list? Can I add a custom extension to the active scan extension so my custom extension will be triggered during the active scan as well?

RSS feed for burp extensions

Just like the burp versions, is there an RSS feed for newly added extensions in the bapp store? Or should one write a custom parser on it?

HTTP Request Smuggle false positives

Hello, I've learned a lot on this topic by resolving every lab, but now I have been trying to find them in the real world and when I use this extension many times it finds at possible CL.TE or TE.CL and it always says...

How to invoke a burp enterprise scan with extension from command line / jenkins CICD

Hello, Our organization has a burpsuite enterprise license. We are trying to invoke burp enterprise site (with custom configuration and extension) from jenkins or from REST API - POST screen. I have created a burp...

ip rotate

i have installed the extension IP rotate and require fields. further provided required access key and secret key from aws services. yesterday it was functioning well. but now it is not getting enabled only and at the same...

Issue with ATOR Loading an Access Token

I seem to be having an issue with the way that ATOR is pulling an access token from a Request. I have dug into the issue and it appears to not be properly pulling the token and replacing it in my requests. I tried a few...

How can I move burp extension folder elswhere ?

Python extension works with new header but unable to replace existing header?

Log4Shell Scanner & Log4Shell Everywhere

Match the string and grep entry line

Example of replacing and or adding a cookie via Burp Extender in Python?

how to load request[]

Allow Extensions to Bypass Global Timeout

Log4Shell and Burp "Enterprise edition"

Weird behavior while setting request

stringToBytes method outputting invalid/incorrect characters

Log4Shell and Burp "Enterprise edition"

How to view audit requests generated by Collaborator Everywhere?

Log4Shell Scanner and Log4Shell Everywhere

Turbo Intruder

Add extension to active scan

RSS feed for burp extensions

HTTP Request Smuggle false positives

How to invoke a burp enterprise scan with extension from command line / jenkins CICD

ip rotate

Issue with ATOR Loading an Access Token

Burp Suite Support Center