Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Replace string from list

Casp3r0x1 | Last updated: Oct 29, 2020 08:46AM UTC

how to replace string that in the request from new string in a list that I will define that list to burp note1 : burp must replace string with new string from list every time note2 : This should happen automatically note3 : I can't use intruder because the request is change every time the only thing is not changed is the string which I want to replace thanks in advance

Liam, PortSwigger Agent | Last updated: Oct 29, 2020 11:52AM UTC

Have you tried using Turbo Intruder? - https://portswigger.net/bappstore/9abaa233088242e8be252cd4ff534988 Attacks are configured using Python. This enables the handling of complex requirements such as signed requests and multi-step attack sequences.

Casp3r0x1 | Last updated: Oct 29, 2020 01:45PM UTC

I cant use Turbo Intruder because the request is changing every time I want burp if see the request which has this string "casp3r" replace it with a new string from list

Liam, PortSwigger Agent | Last updated: Oct 29, 2020 03:54PM UTC

Why can you not use Turbo intruder for this task? How is the request changing every time? Could you provide us with some examples?

Casp3r0x1 | Last updated: Oct 29, 2020 08:59PM UTC

here is an example of post request for login https://imgur.com/Rsbk1xf marked in blue : is changed every time I press the login button in my browser and they are generated by javascript and there isn't any response from server that contains any string that I marked in blue in the bottom is the code which I will brute force it using specific list the idea is : I can make the login button pressed automatically I want the burp if see the request replace the code with new one from a list OR : find a method that can generate the marked blue string automatically and replace the code from a list thanks for your reply

Liam, PortSwigger Agent | Last updated: Nov 02, 2020 10:10AM UTC