Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Pre-defined extension list

Ivan | Last updated: Aug 04, 2020 03:49PM UTC

Hi, I don't know if it has been suggested before, but a nice feature would be some way to load some extensions by default (like a whitelist/allowlist). Like I would to load by default "content type converter", "logger++" and whatsoever then load J2EEScan only when I got java-based servers and so on. I hope I have explained myself clearly.

Uthman, PortSwigger Agent | Last updated: Aug 05, 2020 01:09PM UTC

Hi Ivan, The UserConfigPro/Community.json file contains information about installed extensions. Does this fit with what you are trying to do? If not, can you please provide further information? Do you want specific extensions to be loaded automatically based on the type of application you are testing?

Ivan | Last updated: Aug 12, 2020 02:14PM UTC

Hi, would like to have a pre-defined list of extension that i'd like to load by default on burp suite. I'll make an example. Default extensions list: - content-type converter, - psycopath, - command injection/shelling, - taborator, - etc.. When I find out that the web application is Java based i load (already istalled) j2eescan and java deserializer or if it's php I load php object checker and so on. I hope I have explained myself clearly.

Uthman, PortSwigger Agent | Last updated: Aug 12, 2020 02:28PM UTC

You can most likely achieve this with the configuration file above but you would need to create separate copies and load the configuration each time you load Burp.

Ivan | Last updated: Aug 19, 2020 07:21PM UTC

Hi, thanks it worked. I've just created an user project save file and it works perfectly! thanks again.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.