Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Add "Invoke Extension" to "Session Handling Action Editor"

August | Last updated: Nov 14, 2016 09:59PM UTC

The "Session handling action editor" has a dropdown menu with two options to "Define behavior dependent on session validity": - Prompt for in-browser session recovery - Run a macro I would like to see "Invoke a Burp Extension" added as an option. Currently you can run a macro /and then/ invoke an extension, so why can't I just invoke the extension directly?

PortSwigger Agent | Last updated: Nov 15, 2016 09:43AM UTC

There is probably a workaround that will do what you need. In your action that checks for session validity, select the option not to process any further rules or actions for this request, if the session is valid. Then just create a second rule that directly invokes your extension. This rule will only execute if the session validity check failed.

Burp User | Last updated: Nov 15, 2016 08:55PM UTC