Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Replacement of XML value in the body

Antoine | Last updated: Mar 20, 2018 12:59PM UTC

Hello, I would like to replace two different values in a SOAP request by the result of a local python script and thus for all SOAP requests that Burp proceeds (intruder, scanner...). Should I develop my own extension? If yes which method is the most convenient to this purpose? Thanks in advance Regards, Antoine

PortSwigger Agent | Last updated: Mar 20, 2018 01:29PM UTC

Hi Antoine, Yes, this would be a good task for an extension. The way I recommend doing this is to implement ISessionHandlingAction. Your extension gets the current request before it is sent, and has the ability to update it. Users of your extension can create a Session Handling Rule, with the action "Invoke a Burp extension". This allows the user to determine what requests the extension will apply to, by defining a scope. An alternative approach is to implement IHttpListener, which is invoked for every request and response, regardless of whether a session handling rule is defined.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.