Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

extension to the intruder api

Brunner, | Last updated: Mar 05, 2018 08:20AM UTC

Hi, I was wondering if you guys had any plans to bring an update to the burp-api, containing an extension of the api for the intruder? If not - it would be awesome if it were possible to use the intruders "request-firing", "response-storing", "grep-extract from response" feature via the extension-api calls. E.g.: I get use an api call to define and start an intruderAttack. As return I get the list of responses. Those in turn I can hand over to another api-call which uses the user-defineable "repsonse-patterns" of the grep-extract-feature and returns a the list of request-response pairs which show differences to the defined pattern. f.e.: createNewIntruderAttack(IHttpService service, String HttpMethod, byte[] requestTemplate, List payloadPositions, String attackMethod); grepExtractIntruderResponses(List<IHttpRequestResponse> reqRespPairs, byte[] pattern) We at Dynatrace could really use such a feature. Thx

Liam, PortSwigger Agent | Last updated: Mar 05, 2018 08:52AM UTC

Thanks for this request. We have long term plans to add this functionality. Unfortunately, we can't provide an ETA. In the meantime you could use the makeHttpRequest method in IBurpExtenderCallbacks to send an individual request. You'd need to write your own code to replace the payloads: - https://portswigger.net/burp/extender Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.