Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

extension to the intruder api

Brunner, | Last updated: Mar 05, 2018 08:20AM UTC

Hi, I was wondering if you guys had any plans to bring an update to the burp-api, containing an extension of the api for the intruder? If not - it would be awesome if it were possible to use the intruders "request-firing", "response-storing", "grep-extract from response" feature via the extension-api calls. E.g.: I get use an api call to define and start an intruderAttack. As return I get the list of responses. Those in turn I can hand over to another api-call which uses the user-defineable "repsonse-patterns" of the grep-extract-feature and returns a the list of request-response pairs which show differences to the defined pattern. f.e.: createNewIntruderAttack(IHttpService service, String HttpMethod, byte[] requestTemplate, List payloadPositions, String attackMethod); grepExtractIntruderResponses(List<IHttpRequestResponse> reqRespPairs, byte[] pattern) We at Dynatrace could really use such a feature. Thx

Liam, PortSwigger Agent | Last updated: Mar 05, 2018 08:52AM UTC