Skip to content

Burp extension to use updated token values, such as a bearer token

Notifications You must be signed in to change notification settings

CyberNinjas/UpdateToken

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 

Repository files navigation

UpdateToken

This Burp extension is used to updated bearer tokens, similar to how Burp's cooke jar works. Specifically, it pulls a authorization token out of a JSON response and includes it in future request headers.

##Example It will extract the following token from an HTTP response:

"access_token":"5dbf5b54-4644-4015-a08e-333deea4c78c",

And then include it in future request headers in the following format:

Authorization: bearer 5dbf5b54-4644-4015-a08e-333deea4c78c

If you are signing into multiple sessions at the same time, I would disable this extension, as it wil likely cause issues for you.

##Releases See the Releases tab for a pre-built jar.

It will likely need some customization, so it's more of an extension template for you to modify, than it is something you can use without any changes. I've used this to update a CSRF token, and I've left that code commented out, so you can use this to update CSRF tokens as needed (e.g. ones that quickly time out), without using macros. Macros are very inefficent because they require a second request after reach request, which significantly increases the time it takes to active scan a large or slow site.

About

Burp extension to use updated token values, such as a bearer token

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Java 100.0%