Cyber Risks · PortSwigger Research

Sample Burp Suite extension: custom logger

Summary: PortSwigger published a sample Burp Suite extension that adds a suite-wide HTTP logger to the main Burp UI, built in approximately 200 lines of fairly simple code using the new extensibility API. The download includes Java and Python source code and a compiled Java JAR, with HTTP message handling and rendering left to Burp itself via the API.

Bottom line: The extension is a working demonstration that roughly 200 lines of code can add a suite-wide logging capability to a tool your testers already run, which sets a low bar for what teams can build in-house rather than buy.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related