search

lorenzog / burpAddCustomHeader

A Burp Suite extension to add a custom header (e.g. JWT)
GNU General Public License v3.0
19 stars 22 forks source link

Replacing old bearer token? #10

Closed drwetter closed 4 years ago

drwetter commented 4 years ago

Hi,

thanks for the extension.

The configuration seems pretty straight forward but maybe I missed something.

When I just do a automated scan with burp, I see using logger++ requests with the Authentication: bearer token I supplied but also requests with an old token I used while inspecting the application manually.

So my request / question is: is that possible to replace any Authentication bearer token by the one supplied by the user?

Cheers, Dirk

PS: yes, in 'tools scope' all relevant check boxes are selected

lorenzog commented 4 years ago

Hello @drwetter

Could you check whether the new update helps you with this issue please?

drwetter commented 4 years ago

Thanks!

I haven't checked the repeater before. For that one I can tell I it works. Not sure whether I can do an automated scan during the next few days. If so I'll let you know in any case.

drwetter commented 4 years ago

Seems to work, thanks! (PS: Thanks also for the plugin!)