Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Pass back in "Run post-request macro"

Nicolas | Last updated: Apr 06, 2016 08:53PM UTC

Currently, a session handling rule running a post-request macro can pass back to the invoking tool either: - the response from the current request - the final response from the macro In multi-step work-flows, it is common to have: - the injection point at a intermediary step (let's say #3) - the triggering point at a later step (maybe the final one, let's say #4) In these situations, as a tester enjoying short feedback loops, I'd like to see on the same screen: - the request from Step #3 - the response from Step #4 This is AFAIK doable only with two Burp Suite instances where the upstream one has "pass back the final response from the macro" checked (cf https://www.youtube.com/watch?v=3TW2-zc47B8 around 00:51:00 for an example). I'd like to have a 3rd "pass back" option where the invoking tool receives the *original request* and the *post-macro response*. I understand that it may not be possible, depending on the internal architecture. Asking anyway... ;-)

PortSwigger Agent | Last updated: Apr 10, 2016 08:58AM UTC

We understand that this would occasionally be a useful feature, but it's not trivial to implement. In situations like this, would using the sessions tracer tool help you? This lets you view each step of the session handling logic, including all intermediate requests and responses.

Burp User | Last updated: Apr 11, 2016 09:08PM UTC