Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Conditional Macro

Martinik | Last updated: Aug 17, 2023 10:17AM UTC

In the context of race conditions attack and Sending requests in parallel. I have a POST request to apply a discount coupon code and a GET request to view the cart. As an alternative for "Sending requests in parallel" we can create a macro with the POST request and send the GET request to Intruder (Attack type: Sniper; Payload type: Null payloads, Payload settings: continue indefinitely; Resource pool: 30 concurrent requests, auto throttle). In Intruder, start the attack and then, in browser, refresh the web page to view the "big" discount. If the discount is "big" enough we can place the order. Otherwise, we will Remove the coupon (from browser) and wait for the Intruder attack to set a new discount. Is it possible to create a special macro (or something similar) to do automatically the above manual task: remove the coupon if the discount or total has a specified value? Like a conditional macro: if the total>50 then execute the "Remove" coupon action. Thank you.

Michelle, PortSwigger Agent | Last updated: Aug 17, 2023 02:28PM UTC