Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

DOM Manipulation, DOM Checking

Christoph | Last updated: Mar 03, 2024 02:53PM UTC

Dear Burp Suite Team, I'm interested in developing a Burp extension focused on analyzing elements within the DOM as they load. Currently, I've observed there isn't a built-in functionality within Burp Suite for directly interacting with the DOM. This limitation has led me to rely on an external Chrome extension for this purpose, though I'd much prefer to integrate this capability directly into Burp. My initial strategy involved capturing all incoming and outgoing HTTP requests and responses via a Java instance. However, this approach encountered authentication issues, primarily due to specific cookie management rules. The challenge arises with Single Page Applications (SPAs) that dynamically generate DOM elements (using methods like appendChild() in JavaScript) once the page has loaded. Therefore, I'm submitting a feature request for the ability to access and read the DOM directly within Burp Suite. I would recommend implementing a read-only access feature to safeguard against the introduction of malicious code by third parties. Thank you!

Hannah, PortSwigger Agent | Last updated: Mar 04, 2024 04:40PM UTC