Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do I Set a Token in URL Directory.

Morio | Last updated: Sep 10, 2015 03:00AM UTC

Hi, I want to set a token in URL Directory. And, I use macro. so I want to custmize Macro (on Intruder). Test Site has a Token in URL directory, don't have a url parameter. (Exp. http://xxxxxxxx/test/123456token/) How do I set a Token in URL Directory? I made extender using ISessionHandlingAction. But, I can not custmize macro & intruder...

PortSwigger Agent | Last updated: Sep 14, 2015 08:58AM UTC

Burp's native session handling rules don't support session tokens within the URL file path, only in cookies and conventional request parameters. You could handle this situation with a custom session handling action, and a rule that executes a suitable macro and then invokes your action. Your code will get details of the macro that was executed, and can obtain the relevant token value and update the current request in whatever way is appropriate.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.