Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Writing an extension to add a signature on requests

Alla | Last updated: Jul 01, 2015 09:14AM UTC

Hello, I am testing a web service that expects one of the request parameters to contain a hash of the remaining parameters and a shared secret. If I do a scan of it with Burp Scanner the majority of the requests will be treated as invalid by the service, because of the signature mismatch. What I'd like to do is capture the request the scanner is making just before it is sent, calculate the valid signature and replace it in the request. I suppose there should be a way to do it with Burp Extender, but I don't see a method that allows me to do that. Any suggestions? Thanks. Alla

PortSwigger Agent | Last updated: Jul 02, 2015 08:43AM UTC