Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Add "Invoke Extension" to "Session Handling Action Editor"

August | Last updated: Nov 14, 2016 09:59PM UTC

The "Session handling action editor" has a dropdown menu with two options to "Define behavior dependent on session validity": - Prompt for in-browser session recovery - Run a macro I would like to see "Invoke a Burp Extension" added as an option. Currently you can run a macro /and then/ invoke an extension, so why can't I just invoke the extension directly?

PortSwigger Agent | Last updated: Nov 15, 2016 09:43AM UTC

There is probably a workaround that will do what you need. In your action that checks for session validity, select the option not to process any further rules or actions for this request, if the session is valid. Then just create a second rule that directly invokes your extension. This rule will only execute if the session validity check failed.

Burp User | Last updated: Nov 15, 2016 08:55PM UTC

Actually after I posted this I found a different workaround: Create a macro with no actions and execute that. Then have the extension fire afterwards. I still think it would be great to have the option to exec an extension directly to avoid that kludge.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.