Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Sequencer: Token generation requires two requests

Garth | Last updated: Apr 20, 2023 07:49PM UTC

I would like to analyse token generated for a client's API. However their token generation mechanism requires a POST followed by a GET. The GET has the token embedded in the response body. Sequencer appears to be able to add multiple requests to the "Select Live Capture Request". However it treats each request individual anticipating that the token will be in each response. Is there a way in Sequencer to chain requests and then extract the token from the response in the final request? Otherwise my alternative is to bash script something to generate a file of tokens for import to sequencer.

Hannah, PortSwigger Agent | Last updated: Apr 21, 2023 01:33PM UTC