Burp Extensions - Page 3 - Burp Suite User Forum

carbonator for remote scan

I have installed carbonator,java and jython. I have configured proxy, upstream proxy and intercept to be turned off. The same configuration is saved and I m using this in commandline. java -jar -Xmx2g...

IResponseVariations list with details

Hi, I need to use the IResponseVariations for an extension. I enumerated the attributes using the getVariantAttributes and getInvariantAttributes but I'm not sure on the meaning of all the attributes/attribute...

Wsdler

I have had success in the past using this extension to parse out operations associated with a web service and generates SOAP requests that can then be sent to the SOAP endpoints. However, with Burp v 2020.9.2 on Windows,...

How to highlight the tab of an extension?

Hi, I am working on an extension which has its own tab, it uses regex to search for a specific pattern in an HTTP response. I want to notify the BurpSuite user once the pattern is found, just like what `Proxy` tab does...

WebSocket API

I'm dealing more and more with websockets: is there _any_ way to modify requests on the fly? I'm not afraid of writing a custom extension or fiddle with scripting my own tools. FWIW, if you provide some guidance, I could...

Safety of Bapp Extensions

What does portswigger do in terms of reviewing submitted extensions for safety. Malware/virus scan? Code review? Static/dynamic security analysis? Or are they offered as "use at your own risk"?

Burp Scanner stuck

Hi, I have just stated an unauthenticated scan for one of our website which is accessible through internal VPN only. since last more than 1 hour, I can see that Burp has got stuck on " Unauthenticated crawl. Estimating time...

using IMessageEditorController in Repeater

Hi guys, I am trying to create an extension that adds a tab to the message editor where I need to access request values like the url in the response tab. As far as I know this is done using the getRequest method of the...

Send a request through the proxy

Is there a way to send extension request through the proxy? I would like to add the output of one extension to the proxy history. Thanks.

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

Good morning, The following request in the provided solution did work for me but I don't understand how it's calculated. POST / HTTP/1.1 Host: aca11fb21f25e1e3803a19b400f90012.web-security-academy.net Content-Type:...

Created new burp extension for intruder

Hi, Created a new burp extension for intruder. With this extension users can use Hashcat Maskprocessor arguments to create a bruteforce attack. If this code fits in "BApp Store" here is my...

Lab: Combining web cache poisoning vulnerabilities

Has anyone noticed an issue with Param Miner not able to find the headers required for this lab? Not sure if it's my Param Miner, my Burp, or the lab itself. I've tried by disabling nearly all the other extensions, but my...

getProxyInterceptionEnabled() ?

Hello, For an extension I'm developing, I'd like to have the getter counterpart of setProxyInterceptionEnabled(), that would return either the proxy is enabled or not. I'm not able to find it anywhere, neither another...

Having an IScannerInsertionPointProvider that only provides IScannerInsertionPoint objects to my extension's IScannerCheck

Hi Portswigger people I have written an extension to automatically perform a variety of manipulations on URL paths, send a modified request and then check the response. For example, add various additional extensions to...

carbonator for remote scan

IResponseVariations list with details

Wsdler

How to highlight the tab of an extension?

WebSocket API

Safety of Bapp Extensions

Burp Scanner stuck

using IMessageEditorController in Repeater

Send a request through the proxy

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

Created new burp extension for intruder

Lab: Combining web cache poisoning vulnerabilities

getProxyInterceptionEnabled() ?

Having an IScannerInsertionPointProvider that only provides IScannerInsertionPoint objects to my extension's IScannerCheck

how to install burp moudle in jpython

Unable to import Crypto.Cipher module for python plugin

Office Open Xml Editor (OOXE) not Displaying after install

Turbo Intruder cause Burp's memory Full

Setting Background of a JPanel when using the callback.CustomizeUiComponents method.

Query Regarding Cross-site request forgery

Burp Suite Support Center