PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sample Burp Suite extension: Intruder payloads

portswigger.net | blog | #burp-suite | #fuzzing | #extensions | #intruder | #payloads | #sample-code
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

This sample extension shows how to register custom Intruder payload providers and processors, enabling attacks on payloads embedded deep within serialized data structures.
Published
Collected

Related coverage

blog · portswigger.net
Sample Burp Suite extension: custom scan insertion points
This sample extension provides custom scanner insertion points, letting Burp Scanner embed payloads correctly within unsupported formats such as Base64-wrapped input and find bugs scanners would miss.
blog · portswigger.net
Sample Burp Suite extension: custom editor tab
This sample extension adds a custom message editor tab that renders and edits data formats Burp does not natively support, such as input serialized as Base64 within a request parameter.
blog · portswigger.net
Sample Burp Suite extension: custom logger
This sample extension adds a suite-wide HTTP logger to Burp's main UI in about 200 lines, demonstrating custom tabs, embedded message editors, and HTTP listeners via the extensibility API.
blog · portswigger.net
Sample Burp Suite extension: traffic redirector
This sample extension redirects outgoing requests from one host to another, letting testers keep driving work from an original site map after an application moves to a new staging URL.
blog · portswigger.net
Sample Burp Suite extension: event listeners
This sample extension registers listeners for runtime events such as HTTP traffic, Proxy interceptions, and new scan issues, and shows why extensions should clean up when unloaded.
blog · portswigger.net
Sample Burp Suite extension: Hello World
This first sample extension demonstrates Burp extension basics: naming an extension, writing to its output and error streams, posting to the alerts log, and how exceptions are reported.
Back