Custom response grep/extract/post-processing in Burp Intruder?
Burp Intruder supports response grep by regexp, and shows every match in a separate column in result table.
It would be helpful to create a custom response processor, written in any language (Python preferred), to generate an extra column value for each request. For example, for each request I need:
1. Access to body
2. Count "words"
3. Return integer value and display it in extra column "Words" in results table
AFAIK, for now there's no way to do it without writing and loading custom extension.
Thank you in advance.
Thanks for this request. You’re right, there isn’t any way to do this natively within Burp. And currently, there is no way for an extension to provide additional data columns in the Intruder attack results.
Next time we work on Intruder and possibilities for further API integration, we’ll look at letting extensions perform custom analysis of Intruder responses and register result columns.