Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

HTTP Proxy Mutating Methods

ichossef | Last updated: Nov 28, 2023 03:49PM UTC

Hi team, I have been using the montoya APIs for quite sometime now https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/proxy/ProxyHttpRequestResponse.html One of the things I'd hoped for is mutating methods in order to modify the request in the proxy history. I am trying to hide sensitive data before the project is shared. Is there any workarounds or is it in the roadmap ? Thank you, Regards

Hannah, PortSwigger Agent | Last updated: Nov 29, 2023 10:35AM UTC

Hi Unfortunately, this is not possible. At the point where the HttpRequestResponse has entered your proxy history, it is not a changeable object. The HTTP History records the information that passes through the proxy. Even if you modify your requests as part of a ProxyHandler, the Proxy History will still display the original and edited request. To hide sensitive data before the project is shared, you would need to identify and delete requests that contain sensitive data. After that, save a copy of your project file and distribute the copy. If there is no data that you are interested in sharing in your Proxy tab, you can save a copy of your project file and exclude that tool data from your copy. Please let us know if you need any further assistance.

ichossef | Last updated: Nov 30, 2023 04:47PM UTC

Hi Hannah, Burp has already the possibility to delete items from the proxy history, for this I am wondering why this functionality is not exported to an API ? Thanks Regards

Hannah, PortSwigger Agent | Last updated: Dec 01, 2023 02:07PM UTC