Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Key-value storage

Kirill | Last updated: Jul 24, 2020 07:43AM UTC

Hi, I need write custom extension to keep pairs from login request: login / auth-code from cookies. I think, that I can catch all login requests and after that write login credentials to the file. After that, I want to change the login credentials in subsequent requests, but the operation of opening the file and finding the location is too time-consuming. Is there any internal key-value storage in the app?

Hannah, PortSwigger Agent | Last updated: Jul 24, 2020 07:57AM UTC

Does IBurpExtenderCallbacks.saveExtensionSetting(java.lang.String name, java.lang.String value) sound suitable? This method is used to save configuration settings for the extension in a persistent way that survives reloads of the extension and of Burp Suite - but you could maybe adapt it to suit your purposes? You can find the full Extender API here: https://portswigger.net/burp/extender/api/

Kirill | Last updated: Jul 24, 2020 11:20AM UTC

Yeah, it can help. But now I have one more question. If I want keep in storage login:password:current auth-code. How I can do this?

Hannah, PortSwigger Agent | Last updated: Jul 24, 2020 11:35AM UTC

Have you had a look at any existing extensions that persist data across multiple reloads and tabs? There are a few different methods that people have implemented. You can find the source code for all of the BApp Store extensions on our GitHub: https://github.com/PortSwigger

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.