Burp Suite User Forum

macro to replace part of URL

Tiago | Last updated: Feb 02, 2015 03:50PM UTC

Hi, I need to test a request similar to /something/<a_different_ID_per_request>/ and need to fetch an valid ID prior to that request. Because the ID is a REST parameter I cannot simply do a macro + session handling rule that requests an valid ID and replaces it in the request being tested because there is no parameter name to match between the requests. Is it possible to achieve this without extensions?

PortSwigger Agent | Last updated: Feb 02, 2015 05:00PM UTC

You can only currently use Burp's built-in macros to update conventional request parameters (in the URL query string, URL-encoded within the body, or multipart body parameters). The only way to update other parts of the request (e.g., REST-style parameters within the URL file path) is via an extension.

You need to Log in to post a reply. Or register here, for free.