Discover how to leverage BurpSuite for advanced web application security testing in this conference talk from BSides Detroit 2015. Learn to create custom extensions and automation rules, starting with the basics of the Extension API and progressing to more complex implementations. Explore topics such as building custom tabs, serializers, and rules, as well as creating macros and handling cookies. Gain insights into extension development, testing processes, and publishing to the BApp Store. Master the art of wielding BurpSuite to enhance your web application security testing capabilities and streamline your workflow through automation.
Overview
Syllabus
Intro
Marius
What you need to know
What you'll learn
Where to find the Extension API
Starting from scratch: imports
Import everything else you'll need!
Starting from scratch: your first class
Callbacks and helpers, finally!
Build on...
Implementing within BurpExtender
Implementing separately
Building a custom tab
Examples & resources: simple custom tab?
Examples & resources: custom serializer
Extension development and testing
BApp Store!
Automatic match & replace
Cookie handling
Creating macros
Remember to test!
Custom rules
Example: custom rule & macros
