Burp Extension - CPH
Custom Parameter Handler - a Burp extension for powerful manipulation of HTTP messages and macros!

This extension provides a simple way to modify any part of an HTTP message, allowing manipulation with surgical precision even (and especially) when using macros. Typically, macros only support HTTP parameters (name=value), but with this extension anything can be targeted as if it were a parameter.

Updates

  • July 31, 2017 - Version 2.0 released on Burp's BAPP Store!
  • June 6, 2017 - All proposed features for v2.0 have been implemented in the development branch!
    • New UI
    • Bug fixes
    • Documentation website
    • Enhancements to existing functionality
    • New functionality, such as:
      • Effective modification viewer
      • Cache retrieval from any previous tab
      • Optional automatic URL encoding

Features

  • Automatic modification of requests, responses, or both, based on scope and pattern matching.
  • Find and replace/append, with support for regular expressions.
  • Scoping to specific Burp Suite tools.
  • Targeting specific matches (only first, all matches, or hand-picked).
  • Chaining and ordering of modifications, and the ability to base next-in-line modifications off previous responses.
  • Save/load Config:
    • Quicksave/quickload (persists between Burp/Extender sessions).
    • Import/export from and to file.
  • After running a macro, extract replacement value from its final response.
  • Modifying each request/response within a macro.

Resources