Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Depicting OpenID flow using a message sequence chart

l. | Last updated: Jun 07, 2019 11:07AM UTC

Dear Burp, as part of a research group we are investigating possible ways of visualizing the OpenID communication from a tool we developed. It was suggested for this purpose to use BURP for its proxy capabilities and the fact that it already can identify and filter exactly what we need. We have seen this page here https://portswigger.net/burp/extender#SampleExtensions where you have some examples, and our idea was to create an extension that would log only the traffic we required based on the OpenID communication of the Identity Provider and the Client and based on that to draw the communication as a chart. The goal is to use something similar to this http://www.mcternan.me.uk/mscgen/ which would allow to visualize the communication. Could you please evaluate the difficulty of such an attempt? Perhaps suggest an alternative or suggest an optimal course of action? Any information you can share will be valuable. Thank you L.V

PortSwigger Agent | Last updated: Jun 10, 2019 03:51PM UTC