Research Academy Daily Swig
My account Customers Account and subscription management About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Custom response grep/extract/post-processing in Burp Intruder?

Ilya | Last updated: Sep 20, 2016 03:39PM UTC

Burp Intruder supports response grep by regexp, and shows every match in a separate column in result table. It would be helpful to create a custom response processor, written in any language (Python preferred), to generate an extra column value for each request. For example, for each request I need: 1. Access to body 2. Count "words" 3. Return integer value and display it in extra column "Words" in results table AFAIK, for now there's no way to do it without writing and loading custom extension. Thank you in advance.

PortSwigger Agent | Last updated: Sep 22, 2016 09:44AM UTC

Thanks for this request. You're right, there isn't any way to do this natively within Burp. And currently, there is no way for an extension to provide additional data columns in the Intruder attack results. Next time we work on Intruder and possibilities for further API integration, we'll look at letting extensions perform custom analysis of Intruder responses and register result columns.

You need to Log in to post a reply. Or register here, for free.