Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Burp Collaborator Mobile App

Toby | Last updated: Nov 07, 2022 02:11PM UTC

Dreamtime / blue sky request :-D Sometimes I'm in a situation where burp is installed on a machine that's not internet connected, but I'd still like to use the collaborator. It would be awesome if there could be a mobile app where I could enter the collaborator details (e.g. public or private collaborator server location and polling location) and some sort of unique identifier which I guess would be exported from burp and then be registered for collaborator alerts via my phone. I guess there would have to be warnings about network charges and limited rate polling (1 per minute?) and I'm not certain this would get used extensively, but this seems like could be v useful in the right circumstances.

Michelle, PortSwigger Agent | Last updated: Nov 08, 2022 10:35AM UTC

Thanks for getting in touch with your idea. Currently, the retrieval of data from the Collaborator server is restricted to the instance of Burp that triggered the payloads, you can find more background on the reasons for this here: https://portswigger.net/burp/documentation/collaborator#security-of-collaborator-data In the scenario you're describing, would it be possible to use a private Collaborator server? https://portswigger.net/burp/documentation/collaborator/deploying

You need to Log in to post a reply. Or register here, for free.