Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Building a Burp Intruder extension that generates multiple payloads for a single request.

James | Last updated: May 11, 2016 06:44AM UTC

I'm working on a Burp Intruder extension for pen-testing our own custom API. As part of the protocol, a HMAC is generated by the client and added to the header, along with another custom header parameter. The body contains a number of JSON fields, the values of which are also used in the HMAC. I need to generate the HMAC from the JSON body and the custom header parameter for each request, as they're dynamic. Is there a way with Intruder to generate multiple payloads for different positions to be included in a single request?

PortSwigger Agent | Last updated: May 11, 2016 07:12AM UTC