The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

replace text in websocket operations

Dave | Last updated: Apr 01, 2015 12:38AM UTC

I want to match and replace text in (outgoing) websockets. But it seems that match-and-replace only works on HTTP, not WebSockets. How can I edit WebSockets? Is there a way to do it with Burp that I haven't noticed? Failing that, what would I need to do to make it happen on my own?

PortSwigger Agent | Last updated: Apr 01, 2015 11:29AM UTC

You can't currently configure match/replace rules for WebSockets messages, sorry. But if you enable Proxy interception of WebSockets messages (at Proxy / Options / Intercept WebSockets Messages), then you can edit them as normal in the Intercept window.

Burp User | Last updated: Apr 01, 2015 01:58PM UTC

Could I write a plugin/extension, or does the API not allow for that?

PortSwigger Agent | Last updated: Apr 01, 2015 02:01PM UTC

Sorry, no, the API doesn't currently expose WebSockets messages.

Burp User | Last updated: Apr 14, 2015 01:50PM UTC

Dave, You can check out an extension that I wrote last year: just google on burp+websocket+extension. Part of the provided functionality is to use a custom filter class that is applied to intercepted websocket messages: basically you can select which messages to process and how to modify them. Source code for the extension is provided as well. Enjoy.

Faisal | Last updated: Jul 11, 2022 05:26PM UTC

is there any chance to add this option ?

Hannah, PortSwigger Agent | Last updated: Jul 12, 2022 08:15AM UTC