Cyber Risks · PortSwigger Research

Timestamp Injector

Summary: PortSwigger Research describes a Burp Suite extension called Timestamp Injector that replaces an outdated timestamp value in an HTTP request with the string "UnixTimeS", and Burp then injects the current Epoch time at that location. The extension, authored by Eric Holub at version 1.5.0 and last updated 27 February 2025, also offers a UI for setting a time offset into the future or past and a custom timestamp format such as yyyy-MM-dd generated with the SimpleDateFormat Java class.

What's compelling: The extension exists because some APIs only return properly when given a current or non-duplicate timestamp, so testers need a repeatable way to refresh that value on every request. PortSwigger states that extensions are written by third-party users of Burp and that it makes no warranty about their quality or usefulness for any particular purpose.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related