The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Match and Replace for a specific endpoint?

Nicolas | Last updated: Sep 04, 2022 11:01AM UTC

Is there a way in Burp, or is there a Burp extension, to do a "Match and Replace" but only for specific URLs? Use case: I'm trying to figure out which properties of the JSON responses coming from an API can be used for a DOM XSS. So I'd like to automatically add '<img src onerror=alert()>' to all those values. But "Match and Replace" alters all responses, which will usually break the app.

Hannah, PortSwigger Agent | Last updated: Sep 05, 2022 08:39AM UTC