PortSwigger / BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition
https://portswigger.net/burp/documentation/scanner/bchecks
GNU Lesser General Public License v3.0
606 stars 107 forks source link

Access insertion point values #33

Open Sh1Yo opened 1 year ago

Sh1Yo commented 1 year ago

It would be nice to have an ability to get the current insertion point value within the given insertion point then block. Some vulnerabilities may depend on the current values of the parameters -- integers, strings or booleans.

A-J-C commented 1 year ago

This was definitely a feature we were hoping to introduce soon.

nbxiglk0 commented 9 months ago

by the way,It would be nice to add the access insertion point name,sometimes whaether to proceed to the next step of detection also depends on some sensitive parameter names.

Michelle-PortSwigger commented 9 months ago

In v2-beta we have introduced the ability to read the insertion point base value. We'll add accessing the insertion point name to our list of potential new features.