Burp Suite User Forum

Create new post

How can I automatically copy, modify, send again every request in burp?

ruvlol | Last updated: Oct 22, 2017 04:35AM UTC

Hi! After sending a request I'd like to resend it automatically with custom transformations (different method, Content-Type, body add or edit). For example I have GET request sent to server and want to resend it again but as POST + add content-type + add body automatically? Like Match and replace, but I dont want to send modified requests first, because it will fail in a lot of ways, I want to send first fair not modified request and second modified. Is there a way to implement this somehow?

PortSwigger Agent | Last updated: Oct 23, 2017 07:30AM UTC

Hi Ruvlol, Thanks for your message. This is something you could do in an extension. For example, you could implement the IHttpListener interface, and generate and issue additional requests within processHttpMessage. You probably want to restrict the Burp tools you'd do this for, e.g. little benefit for Scanner. The UI is only designed to display a single request/response - e.g. Repeater would not show your additional request/response. A simple workaround is to use an extension like Flow or Logger++ that records everything. There are some extensions that do something similar already. For example, Autorize reissues requests with a low privileged session. The extension is open source so you could examine the code for ideas. Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.