PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sample Burp Suite extension: event listeners

portswigger.net | blog | #burp-suite | #extensions | #sample-code | #api | #event-listeners
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

This sample extension registers listeners for runtime events such as HTTP traffic, Proxy interceptions, and new scan issues, and shows why extensions should clean up when unloaded.
Published
Collected

Related coverage

blog · portswigger.net
Sample Burp Suite extension: Intruder payloads
This sample extension shows how to register custom Intruder payload providers and processors, enabling attacks on payloads embedded deep within serialized data structures.
blog · portswigger.net
Sample Burp Suite extension: custom scan insertion points
This sample extension provides custom scanner insertion points, letting Burp Scanner embed payloads correctly within unsupported formats such as Base64-wrapped input and find bugs scanners would miss.
blog · portswigger.net
Sample Burp Suite extension: custom editor tab
This sample extension adds a custom message editor tab that renders and edits data formats Burp does not natively support, such as input serialized as Base64 within a request parameter.
blog · portswigger.net
Sample Burp Suite extension: custom logger
This sample extension adds a suite-wide HTTP logger to Burp's main UI in about 200 lines, demonstrating custom tabs, embedded message editors, and HTTP listeners via the extensibility API.
blog · portswigger.net
Sample Burp Suite extension: traffic redirector
This sample extension redirects outgoing requests from one host to another, letting testers keep driving work from an original site map after an application moves to a new staging URL.
blog · portswigger.net
Sample Burp Suite extension: Hello World
This first sample extension demonstrates Burp extension basics: naming an extension, writing to its output and error streams, posting to the alerts log, and how exceptions are reported.
Back