Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Custom response grep/extract/post-processing in Burp Intruder?

Ilya Rusanen Sep 20, 2016 03:39PM UTC

Burp Intruder supports response grep by regexp, and shows every match in a separate column in result table.

It would be helpful to create a custom response processor, written in any language (Python preferred), to generate an extra column value for each request. For example, for each request I need:

1. Access to body
2. Count "words"
3. Return integer value and display it in extra column "Words" in results table

AFAIK, for now there's no way to do it without writing and loading custom extension.

Thank you in advance.

Dafydd Stuttard Sep 22, 2016 09:45AM UTC Support Center agent

Thanks for this request. You’re right, there isn’t any way to do this natively within Burp. And currently, there is no way for an extension to provide additional data columns in the Intruder attack results.

Next time we work on Intruder and possibilities for further API integration, we’ll look at letting extensions perform custom analysis of Intruder responses and register result columns.

Post Your public answer

Your name
Your email address