Cyber Risks · PortSwigger Research

Extended Macro

Summary: ExtendedMacro is a Burp Suite BApp extension by Frantisek Uhrecky and Miroslav Svitok, version 0.0.5, last updated 27 June 2017, that extends Burp's macro feature so one or more requests can be triggered before every request made by Intruder, Repeater, Scanner, Sequencer or Spider. It extracts data from an arbitrary response and replaces or adds data to the following request, such as a CSRF token or session, or a new header.

What you should know: PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, and this one has not been updated since 27 June 2017 - so anyone relying on it to carry session or CSRF tokens through automated testing is running unmaintained code inside their testing toolchain.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related