Support Center

Burp Community

See what our users are saying about Burp Suite:

How do I?

New Post View All

Feature Requests

New Post View All

Burp Extensions

New Post View All

Bug Reports

New Post View All
Documentation

Burp Suite Documentation

Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.

Full Documentation Contents Burp Projects
Suite Functions Burp Tools
Options Using Burp Suite
Extensibility

Burp Extender

Burp Extender lets you extend the functionality of Burp Suite in numerous ways.

Extensions can be written in Java, Python or Ruby.

API documentation Writing your first Burp Suite extension
Sample extensions View community discussions about Extensibility

Burp Extensions

Make a new post

  • Extra Extensiona

    Is there any extension need to be indatalled manually.

    1 Agent Answer    0 Community Answer
    Oct 15, 2017 04:15AM UTC
  • DNS requests

    I'm using the following Python to try to make DNS requests from my extension: import dns.resolver ... myResolver = dns.resolver.Resolver() try: myResolver.query(domain, "MX") except dns.exception.Timeout: self._printError("Timeout while requesting MX record") This works fine on the command line but times out every...

    1 Agent Answer    1 Community Answer
    Oct 06, 2017 09:44AM UTC
  • How to affect URLs that show up in Target/Site Map

    I am developing an extension to enhance the Target/Site Map filtering capabilities. Is there a way to intercept every Request coming into Burp to allow decision code that would determine if a URL will be displayed in the "Site Map" list on the Target tab? Thanks.

    2 Agent Answers    3 Community Answers
    Oct 05, 2017 08:36PM UTC
  • Extension Not Loading Due to "Stale" Reference

    So I noticed the following behavior when using the Python Scripter extension: 1. Installed the extension 2. Added custom script containing error in Scripter tab 3. Closed Burp 4. Relaunched Burp and noticed the extension would no longer load as it was still referencing the script from 2. 5. Removed/reinstalled the extension, but it still referenced the script from 2 Because the extension...

    2 Agent Answers    1 Community Answer
    Sep 28, 2017 02:42AM UTC
  • Burp Carbonator does not work for me

    I am trying to play around with the carbonator feature of Burp using the demo.testfire application as a test run and had a few questions and issues. Issues: I have installed carbonator and using the command " java -jar <path to burp> http://demo.testfire.net/bank/login.aspx 80". However, this just opens the Burp instance and does not do anything. Is there anything that I am mis...

    1 Agent Answer    0 Community Answer
    Sep 21, 2017 06:47PM UTC
  • Project Configuration Changes Aren't Picked Up During Current IHttpListener.processHttpMessage ...

    (Burp: 1.7.27, OS: macOS 10.12, Java: 8) Given an IBurpExtender that registers an IHttpListener when the listener's IHttpListener.processHttpMessage is called, and the message is a request, it calls IBurpExtenderCallbacks.saveConfigAsJson("project_options.connections.upstream_proxy") to dump the current project-level configuration for Upstream proxies. If applicable, the current ...

    3 Agent Answers    2 Community Answers
    Sep 21, 2017 02:37PM UTC
  • Associating an outgoing request with its response

    Hey, Is there an easy way to associate a request going through the processHttpMessage of a registered IHttpListener with the response that comes back later? Thanks, Justin

    1 Agent Answer    1 Community Answer
    Sep 19, 2017 01:21AM UTC
  • [python] adding a custom header and send JSON in post request.

    Hello team I wanted to know how to add custom header and send JSON in post request in jython. here is my basic code def sendRequest(self,data): host="requestb.in" url=URL("https://requestb.in/q6v4xrq6") req=self._helpers.buildHttpRequest(url) encode=self._helpers.urlEncode(data) body=self._helpers.buildParameter("body", encode, IParamete...

    1 Agent Answer    0 Community Answer
    Sep 17, 2017 07:28PM UTC
  • Extension resource loading

    I've embedded some static files inside the extension, in the folder named `assets`. Trying to access them fails, using following code: InputStream in = DataUtils.class.getClassLoader().getResourceAsStream("/assets/" + filename); Maybe it fails because "/" refers to root of `burp.jar`, not my `ext.jar`. How can I access the assets?

    1 Agent Answer    1 Community Answer
    Sep 10, 2017 04:35AM UTC
  • Highlighting a tab in JTabbedPane of an extension

    Hi, I am working on an extension that has its own JTabbedPane. I am trying to highlight a tab in my extension's JTabbedPane but for some reason the call to setBackgroundAt() simply does nothing. Oddly enough I am able to walk up the chain of components to Burp's JTabbedPane and highlight the main tab of my extension just fine using the same method. Within Burp Suite this situation...

    3 Agent Answers    3 Community Answers
    Sep 01, 2017 04:37PM UTC