Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Pre-defined extension list

Ivan | Last updated: Aug 04, 2020 03:49PM UTC

Hi, I don't know if it has been suggested before, but a nice feature would be some way to load some extensions by default (like a whitelist/allowlist). Like I would to load by default "content type converter", "logger++" and whatsoever then load J2EEScan only when I got java-based servers and so on. I hope I have explained myself clearly.

Uthman, PortSwigger Agent | Last updated: Aug 05, 2020 01:09PM UTC

Hi Ivan, The UserConfigPro/Community.json file contains information about installed extensions. Does this fit with what you are trying to do? If not, can you please provide further information? Do you want specific extensions to be loaded automatically based on the type of application you are testing?

Ivan | Last updated: Aug 12, 2020 02:14PM UTC

Hi, would like to have a pre-defined list of extension that i'd like to load by default on burp suite. I'll make an example. Default extensions list: - content-type converter, - psycopath, - command injection/shelling, - taborator, - etc.. When I find out that the web application is Java based i load (already istalled) j2eescan and java deserializer or if it's php I load php object checker and so on. I hope I have explained myself clearly.

Uthman, PortSwigger Agent | Last updated: Aug 12, 2020 02:28PM UTC

You can most likely achieve this with the configuration file above but you would need to create separate copies and load the configuration each time you load Burp.

Ivan | Last updated: Aug 19, 2020 07:21PM UTC