Burp Suite User Forum

Create new post

Burp Extension to call other extension using Montoya API

Benasin | Last updated: Aug 11, 2023 04:02AM UTC

Hi, I'm writing a custom logger extension using Montoya API. I wonder if there is any way to call other extension using my own one? For example, sending the entry to Param Miner. How do I implement this Extensions option menu for my logger table? Thanks!

Hannah, PortSwigger Agent | Last updated: Aug 11, 2023 09:09AM UTC

Hi It's not possible to implement your own custom "send to other extension" function. However, if you are displaying a request or response in an HttpRequestEditor or HttpResponseEditor, then the built-in context menu will have any extension-generated context menu items.

Benasin | Last updated: Aug 11, 2023 09:46AM UTC

Hi I'm having an idea to use Java Reflection to invoke other extensions, but I'm not sure if this is possible. What are your thoughts on this?

Hannah, PortSwigger Agent | Last updated: Aug 11, 2023 04:28PM UTC

We wouldn't recommend using this, as it makes your extension dependent on other extensions. The other extension may not be loaded, or the code round it may change. Extensions are intentionally compartmentalized to minimize impact. You may be able to include the other extension as part of your extension, in a manner similar to HTTP Request Smuggler (https://github.com/PortSwigger/http-request-smuggler). However, since you can already utilize the default Burp context menu on request and response editors, it may be unnecessary.

Benasin | Last updated: Aug 13, 2023 03:12PM UTC

Thank you this will do it for me.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.