Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

BSON Format

Maximiliano | Last updated: Aug 09, 2017 02:47AM UTC

Does anyone have experience testing endpoints that expect BSON content? Is it possible to implement a plugin that encodes the Active Scan payloads as to be able to stress these endpoints from Burp Pro? Thanks in advance.

PortSwigger Agent | Last updated: Aug 09, 2017 07:19AM UTC

You could definitely write an extension for this. WCF Deserializer is a good example of something similar. Probably best to start with an IMessageTab to display BSON content, then IScannerInsertionPointProvider. Alternatively, an IHttpService that translates BSON to/from JSON, allowing you to use Burp's built-in JSON support.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.