Support Center

Burp Community

See what our users are saying about Burp Suite:

How do I?

New Post View All

Feature Requests

New Post View All

Burp Extensions

New Post View All

Bug Reports

New Post View All

Burp Suite Documentation

Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.

Full Documentation Contents Burp Projects
Suite Functions Burp Tools
Options Using Burp Suite

Burp Extender

Burp Extender lets you extend the functionality of Burp Suite in numerous ways.

Extensions can be written in Java, Python or Ruby.

API documentation Writing your first Burp Suite extension
Sample extensions View community discussions about Extensibility

Burp Extensions

Make a new post

  • Need an extension to do advanced substitution

    We are using a commercial web app testing product to test a customer's massive application and we need to work around a problem in the webapp testing product. Turning the test, the product does a GET and the customer's server returns a page with these fragments: ----------------- <form name='win1' method='post' action="https://webaddress/url1"> &...

    1 Agent Answer    0 Community Answer
    Nov 15, 2017 06:12PM UTC
  • IBurpExtenderCallbacks.makeHttpRequest() throws RuntimeException

    If the network connection fails, callbacks.makeHttpRequest throws a RuntimeException. Any way we could get that method to declare that it throws a proper subclass of (presumably) IOException so we could check for and handle it in code?

    2 Agent Answers    1 Community Answer
    Nov 08, 2017 12:02AM UTC
  • How to retrieve only body of response

    Hello team I am making http requests to a site and how to get only body of the response. here is the code :- req = self._helpers.buildHttpMessage(headers, body) print self._helpers.bytesToString(req) resp = self.callbacks.makeHttpRequest("", 1330, True, req) print self._helpers.bytesToString(resp) I have tried to get body by resp.getResponse() but it didnt wor...

    1 Agent Answer    0 Community Answer
    Oct 24, 2017 11:35AM UTC
  • Updating a parameter inline

    Hey, When updating a query parameter through the "IExtensionHelpers.updateParameter" method, the parameter is removed from the query parameters, then updated and appended to the end. Is this intended functionality and if so is there an easy way to update the parameter inline? Thanks, Justin

    1 Agent Answer    0 Community Answer
    Oct 20, 2017 06:31PM UTC
  • Extra Extensiona

    Is there any extension need to be indatalled manually.

    1 Agent Answer    0 Community Answer
    Oct 15, 2017 04:15AM UTC
  • DNS requests

    I'm using the following Python to try to make DNS requests from my extension: import dns.resolver ... myResolver = dns.resolver.Resolver() try: myResolver.query(domain, "MX") except dns.exception.Timeout: self._printError("Timeout while requesting MX record") This works fine on the command line but times out every...

    1 Agent Answer    1 Community Answer
    Oct 06, 2017 09:44AM UTC
  • How to affect URLs that show up in Target/Site Map

    I am developing an extension to enhance the Target/Site Map filtering capabilities. Is there a way to intercept every Request coming into Burp to allow decision code that would determine if a URL will be displayed in the "Site Map" list on the Target tab? Thanks.

    3 Agent Answers    5 Community Answers
    Oct 05, 2017 08:36PM UTC
  • Extension Not Loading Due to "Stale" Reference

    So I noticed the following behavior when using the Python Scripter extension: 1. Installed the extension 2. Added custom script containing error in Scripter tab 3. Closed Burp 4. Relaunched Burp and noticed the extension would no longer load as it was still referencing the script from 2. 5. Removed/reinstalled the extension, but it still referenced the script from 2 Because the extension...

    2 Agent Answers    1 Community Answer
    Sep 28, 2017 02:42AM UTC
  • Burp Carbonator does not work for me

    I am trying to play around with the carbonator feature of Burp using the demo.testfire application as a test run and had a few questions and issues. Issues: I have installed carbonator and using the command " java -jar <path to burp> 80". However, this just opens the Burp instance and does not do anything. Is there anything that I am mis...

    3 Agent Answers    3 Community Answers
    Sep 21, 2017 06:47PM UTC
  • Project Configuration Changes Aren't Picked Up During Current IHttpListener.processHttpMessage ...

    (Burp: 1.7.27, OS: macOS 10.12, Java: 8) Given an IBurpExtender that registers an IHttpListener when the listener's IHttpListener.processHttpMessage is called, and the message is a request, it calls IBurpExtenderCallbacks.saveConfigAsJson("project_options.connections.upstream_proxy") to dump the current project-level configuration for Upstream proxies. If applicable, the current ...

    3 Agent Answers    2 Community Answers
    Sep 21, 2017 02:37PM UTC