Burp v1.4 preview - Macros
Summary: PortSwigger's Burp v1.4 preview adds macros to its new session handling functionality, letting users record a predefined sequence of one or more requests from the Proxy history and configure how each item is handled. Burp automatically tries to find interdependencies between items, such as parameters whose values can be derived from a preceding response, and the macro can be tested in isolation with the full request/response sequence reviewed.
Bottom line: The post states plainly that the configuration required in many real-world situations is complex and mistakes are easily made, and that a full in-tool debugger for troubleshooting session handling does not yet exist - the suggested workaround is chaining a second Burp instance as an upstream proxy to see the full request sequence.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026