Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

how to redirect and aduit in burp extention.

MayLion | Last updated: Apr 11, 2022 10:08AM UTC

I am creating an extension using python to send additional attack signatures with burp extender's doactive scan and analyze XSS etc. I specified an arbitrary attack signature that I set as the insertion point, and it succeeded from the response to the judgment of the vulnerability, but even if I receive status code 302 etc., the request after redirect does not occur. Like Audit in Burp professionnal, I want to check XSS to the redirect destination. What kind of function or code should I use? A cookie is required for the redirect destination request.

Hannah, PortSwigger Agent | Last updated: Apr 11, 2022 12:13PM UTC

Hi Extensions will not automatically follow redirects. You will have to specify that behavior yourself in your extension. In order to make an HTTP request, you can use IBurpExtenderCallbacks.makeHttpRequest().

MayLion | Last updated: Apr 11, 2022 12:54PM UTC

Thank you for your comment. It was exactly what I expected. You have to make an http request yourself, right? How can a redirect send the current logged-in cookie? It seems that redirect-related resources are relatively in demand, but isn't the sample code etc. publicly available?

Hannah, PortSwigger Agent | Last updated: Apr 11, 2022 01:40PM UTC