Burp Macros - Enhance your Web App Pen Testing

Using Burp Suite Macros is a powerful way to enhance your Web Application Penetration Testing and Bug Bounty Hunting capability. From Automatically regenerating CSRF tokens to 2nd Order attacks, the Macro Editor will save you a lot of time and really enhance what Burp Suite is capable of.
Links:
_________________________________________
Twitter: / json_sec
Buy me a coffee: PayPal.Me/jsonsec
===== About JSON : Sec =====
JSON Sec is a Cyber Security KZbin channel, bringing you a range of videos from technical tutorials, security tips and documentaries . The goal is to help everybody through all technical levels to improve the security of their digital life.
Please consider subscribing if you enjoyed this video!

[@janekmachnicki2593]

Great tutorial

[@andretorresbr]

Great. Cheers from Brazil.

[@rtvikkatarya3634]

hey man great video

[@kumararun6593]

Thanks mate

[@whetfaartz6685]

very radical thank u!

[@fedemolto]

Thx

[@itsm3dud39]

thens

[@yux1an]

I'm having problems with the csrf token being updated, it updates the token only to the original csrf selected on the macro and does not generate anything new. Any ideas why would this happen?

[@Dilipkumar-by2wu]

I'm having the same issue but in my case it's session_code do you got solution to this?

[@dulemagija8584]

I don't get it, based on what he generates new csrf tokens every time?

[@JSONSEC]

Exactly, it will automatically update the csrf so you don't have to

[@x87-64]

How does Burp know where to put custom parameter in our requests?

[@JSONSEC]

Good question, that's with the curly $ signs

[@x87-64]

@@JSONSEC I meant when set the macro to capture the user_token using that regex thing, how does it automatically put it as the GET parameter user_token. How does it do that?

[@alanadelson4647]

@@x87-64when You have this answer share this with me cause I have this dude Too