1.0. OverView

AutoMacroBuilder Extension for burpSuite

1.0. Overview

AutoMacroBuilder provides various functions for vulnerability tests of multi-step sequence of request.

For details, refer to the sidebar menu on the right.

• 1.2. Basic usage
  • Like the burpsuite Macro function, record and play back the sequence of requests as Macro. You can test each request in Macro with burpsuite 's Repeater / intruder / scanner tool.
  • In burpsuite Macro, it is necessary to modify Macro every time it tests each request in Macro but in this function it is not necessary. Simply select the request you want to test and select the SendTo Repeater / Intruder / Scanner menu.
  • The anti-CSRF token parameter is extracted from the sequence response. Click the [Track] button to display the parameter list, and the setting is completed simply by selecting the parameter to be tracked.
• [1.3. Custom function]
  • if Parameters that are difficult to extract with the basic functions, they can be extracted from the response with the regular expressions.
  • You can set the ascending numeric value to the request parameter. It can be used when it is necessary to set a unique value for each running.
  • You can set the value of the specified column in the CSV file to the request parameter. It can be used when a unique registered value is required for each running, such as the registration code of a gift campaign site.