Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Autoscan Insertion points

Tony | Last updated: Aug 09, 2017 05:45PM UTC

I am trying to make an extension for burp that provides request and insertion points for scan via command line. I can perform scan on the request with default insertion points of that is by not passing anything for the insertion pint argument in doAutoScan function. But I want to be able to provide my own insertion points. Could anyone guide me with the same. I wanna know the type of data structure and example values to pass to the doAutoScan function. An example would be great in understanding the concept. Thanks in advance. I am using Python language.

PortSwigger Agent | Last updated: Aug 10, 2017 07:38AM UTC

Hi Tony, There is a version of doActiveScan that lets you specify insertion points. Calling it from Python is slightly tricky; you must explicitly create a Java array. I've created a simple example here: - https://gist.github.com/pajswigger/9d9ea68e575d2133792940dd740ad03c

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.