Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Build macro with URLs derived from previous response bodies

Nil | Last updated: Aug 29, 2016 05:24PM UTC

I found a post in http://forum.portswigger.net/thread/401/post-get-login-macro-example, which couldn't be accommodated by Burp 4 years ago. I was wondering if nowadays, with current BurpSuite Pro capabilities, maybe such a thing is possible. Please find below the user's original post for your convenience: "Can someone explain how to make a Macro which uses response data for the next get request URL ? Where with the macro editor one can use "Custom parameter locations in response" to Define and Name the variable part of the redirect location. But... how does one define in the marco editor that the next GET should use that variable at a specific location?? Example session with only the useful lines: -------------------------------------------------------------------------------------------------- #################-- Request: POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=---------------------------169223027415386646651510060160 Content-Length: -----------------------------169223027415386646651510060160 Content-Disposition: form-data; name="Username" someuser101 -----------------------------169223027415386646651510060160- #################-- Response: HTTP/1.1 301 Moved Permanently Location: m.testing.org/Session/33218-7m6NJNYvN8pSltNWTlWU/Hello.wssp? <html> ... -------------------------------------------------------------------------------------------------- #################-- Request: GET /Session/33218-7m6NJNYvN8pSltNWTlWU/mailbox.wssp?mailbox=INBOX& HTTP/1.1"

PortSwigger Agent | Last updated: Aug 31, 2016 09:10AM UTC

Sorry, there still isn't a way to update parts of macro requests aside from parameters in the query string, body or cookies.

Burp User | Last updated: Dec 10, 2019 02:08PM UTC

Does this support in the newest Burp pro release? --> to use a variable (derived from the previous response) in a new request?

Hannah, PortSwigger Agent | Last updated: Dec 10, 2019 04:03PM UTC

According to the macro documentation, you can specify that a parameter's value should be derived from a previous response (Parameter handling - https://portswigger.net/burp/documentation/desktop/options/sessions/macro-editor). Depending on your requirements, there may be an extension in the BApp Store that can help as well. TokenJar (https://portswigger.net/bappstore/d9e05bf81c8f4bae8a5b0b01955c5578) appears to have a lot of functionality.

BarakH | Last updated: Aug 10, 2021 04:01PM UTC

According to the macro documentation, you can specify that a parameter's value should be derived from a previous response (Parameter handling - https://portswigger.net/burp/documentation/desktop/options/sessions/macro-editor). how??? :)

Hannah, PortSwigger Agent | Last updated: Aug 16, 2021 03:59PM UTC

When you record a macro, you have the option to "Configure item" on the individual requests making up the macro. The "Custom parameter locations in response" section within the "Configure item" option is where you can define a parameter to be used in subsequent macro requests.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.