/burp-second-order

Extension for semi-automated search for second order issues in webapps

Primary LanguageJavaMIT LicenseMIT

Second Order

Second order issues are being introduced using one request, while their effect is on response of different, unrelated request. This extension aims to support tester with semi-automated solution towards discovering such issues.

This functionality can be accomplished using Burp alone, but I personally find this extension way to be both quicker and less distracting when conducting tests.

second-tab

second-menu

Requires Java 8.

This extension DOES NOT require Burp Suite Professional

Download

https://github.com/hvqzao/burp-second-order/releases/download/1.0/second-order.jar

License

MIT License