Support Center

Burp Community

See what our users are saying about Burp Suite:

How do I?

New Post View All

Feature Requests

New Post View All

Burp Extensions

New Post View All

Bug Reports

New Post View All
Documentation

Burp Suite Documentation

Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.

Full Documentation Contents Burp Projects
Suite Functions Burp Tools
Options Using Burp Suite
Extensibility

Burp Extender

Burp Extender lets you extend the functionality of Burp Suite in numerous ways.

Extensions can be written in Java, Python or Ruby.

API documentation Writing your first Burp Suite extension
Sample extensions View community discussions about Extensibility

Burp Extensions

Make a new post

  • [python] adding a custom header and send JSON in post request.

    Hello team I wanted to know how to add custom header and send JSON in post request in jython. here is my basic code def sendRequest(self,data): host="requestb.in" url=URL("https://requestb.in/q6v4xrq6") req=self._helpers.buildHttpRequest(url) encode=self._helpers.urlEncode(data) body=self._helpers.buildParameter("body", encode, IParamete...

    1 Agent Answer    0 Community Answer
    Sep 17, 2017 07:28PM UTC
  • Extension resource loading

    I've embedded some static files inside the extension, in the folder named `assets`. Trying to access them fails, using following code: InputStream in = DataUtils.class.getClassLoader().getResourceAsStream("/assets/" + filename); Maybe it fails because "/" refers to root of `burp.jar`, not my `ext.jar`. How can I access the assets?

    1 Agent Answer    1 Community Answer
    Sep 10, 2017 04:35AM UTC
  • Highlighting a tab in JTabbedPane of an extension

    Hi, I am working on an extension that has its own JTabbedPane. I am trying to highlight a tab in my extension's JTabbedPane but for some reason the call to setBackgroundAt() simply does nothing. Oddly enough I am able to walk up the chain of components to Burp's JTabbedPane and highlight the main tab of my extension just fine using the same method. Within Burp Suite this situation...

    4 Agent Answers    5 Community Answers
    Sep 01, 2017 04:37PM UTC
  • bug report for ruby extension file upload traverser

    bug report in ruby extension two different report platform java java.lang.RuntimeException: BUG: could not initialize constructor handle at org.jruby.runtime.scope.ManyVarsDynamicScope.<clinit>(ManyVarsDynamicScope.java:39) at org.jruby.runtime.ThreadContext.<init>(ThreadContext.java:214) at org.jruby.runtime.ThreadContext.newContext(ThreadContext.java:85) at org.jruby.inter...

    1 Agent Answer    0 Community Answer
    Sep 01, 2017 03:01PM UTC
  • Burp main jframe

    Where can I access a reference to Burp's main JFrame? It's required for displaying JDialogs relative to it.

    2 Agent Answers    1 Community Answer
    Aug 24, 2017 01:25PM UTC
  • Autoscan Insertion points

    I am trying to make an extension for burp that provides request and insertion points for scan via command line. I can perform scan on the request with default insertion points of that is by not passing anything for the insertion pint argument in doAutoScan function. But I want to be able to provide my own insertion points. Could anyone guide me with the same. I wanna know the type of data structur...

    1 Agent Answer    0 Community Answer
    Aug 09, 2017 05:45PM UTC
  • Backslash Powered Scanner - Identify Backend Parameters

    During a scanning process, I came across multiple "Interesting input handling" issues. If I look into the Advisory tab, I get a comment (showed with italic style) saying the following: "To scan for backend parameters, right click on the attached request and select 'Identify Backend Parameters'". I have continuously searched for that specific command but I was not ...

    1 Agent Answer    0 Community Answer
    Aug 08, 2017 09:14AM UTC
  • IMessageEditor/IMessageEditorController context menu

    I noticed that while using IMessageEditor/IMessageEditorController calls to create a view for request and responses that when you bring up the context menu, it will not allow you to use Send to Repeater/Intruder/Sequencer. An exception shows up on the error window for the plugin in the Extender tab when those options are clicked. However, things like Copy URL and Send to Comparer work. Any ideas?

    1 Agent Answer    0 Community Answer
    Aug 03, 2017 05:42PM UTC
  • Highlighting in IMessageEditor

    Would it be possible to expose an API call to add highlighting to IMessageEditor like the method setSearchExpression() within ITextEditor? Thanks.

    1 Agent Answer    1 Community Answer
    Aug 02, 2017 05:52PM UTC
  • Download issue

    Not able to login to csld account to download the Software Portswigger

    1 Community Answer
    Jul 11, 2017 06:42AM UTC