Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Tool for creating Burp Scanner Checks

amarionette | Last updated: Feb 26, 2022 08:45PM UTC

Hello, I believe it would be create to have built-in functionality similar to Burp Bounty which allows for users with the Pro version to make their own Scanner checks, based off: * Grep strings * Delays * Collaborator hits I think this would be better maintained and supported by PortSwigger and would add exponentially more value to the tool, by decreasing the amount by limiting the barrier to entry to making Extensions.

Hannah, PortSwigger Agent | Last updated: Feb 28, 2022 11:45AM UTC

Hi This functionality is provided to users in the form of the Extender API. You could also suggest any improvements for the "Burp Bounty, Scan Check Builder" extension to the author here: https://github.com/wagiro/BurpBounty This year, we are working on some major changes to the Extender API, which should make it easier for users to write extensions. You can find our 2022 roadmap here: https://portswigger.net/blog/burp-suite-roadmap-for-2022

amarionette | Last updated: Mar 07, 2022 11:07PM UTC

Hi Hannah, Is there a place where I can track what has been added to Extender API as of this year, and what the next planned additions are? Thanks!

Hannah, PortSwigger Agent | Last updated: Mar 08, 2022 08:34AM UTC

Hi We don't have anything publicly available, but this is a target that will be ongoing all year. We're currently working on replicating the current functionality of the Extender API in the new API. This will ensure backward compatibility. Once that is complete, we can look at adding additional functionality to the new Extender API.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.