Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Extender API: do request/response on behalf of Burp

hazcod | Last updated: Oct 02, 2020 07:04AM UTC

Hi, is there a way to do request/response on behalf of burp? I see there is the IHttpListener.processHttpMessage that is called on request and on response , but this only seems to adapt the HTTP request/response, but it will still go out locally. Is there a away to prevent burp from sending out the request and handling it completely in my addon?

Uthman, PortSwigger Agent | Last updated: Oct 02, 2020 08:42AM UTC

Does makeHTTPRequest fit your use-case? - https://portswigger.net/burp/extender/api/burp/IBurpExtenderCallbacks.html You can look at example implementations on our GitHub repo or our website: - https://github.com/PortSwigger - https://portswigger.net/burp/extender#SampleExtensions

hazcod | Last updated: Oct 02, 2020 10:27AM UTC

Hi Uthman, no, because I want to receive regular burp proxy traffic. So users proxy through burp as usual, but my extension takes care of the response.

Uthman, PortSwigger Agent | Last updated: Oct 02, 2020 10:41AM UTC

What functionality are you trying to add? Are you intending to modify responses in your extension? Can you clarify what you mean by "my extension takes care of the response"?

hazcod | Last updated: Oct 02, 2020 10:55AM UTC

My extension would proxy the request to our infrastructure over a secure channel.

Uthman, PortSwigger Agent | Last updated: Oct 02, 2020 11:48AM UTC

Thanks. Providing extension support is beyond the scope of our support service so I would suggest modeling your extension based on an existing one (if it already implements the functionality you are looking for). The post will stay up so anyone in the community is free to comment too.

hazcod | Last updated: Oct 02, 2020 11:59AM UTC

Uthman, so are you saying it isn't possible or..? There are no other extensions doing the same.

Uthman, PortSwigger Agent | Last updated: Oct 02, 2020 12:38PM UTC

It should be possible. Are you trying to intercept a request and then process it in your extension before it is sent out? (e.g. modify the request) You may want to register a proxy listener, intercept the request (IInterceptedProxyMessage), perform some processing, and then send out the request.

hazcod | Last updated: Oct 02, 2020 01:27PM UTC

Hi Uthman, the difference is that my extension should send out the request, instead of only modifying it.

Uthman, PortSwigger Agent | Last updated: Oct 05, 2020 01:55PM UTC