Burp Macros - Enhance your Web App Pen Testing

[@Clutchisback1PC]

Amazing! Helped me understand something I've been bad with for years

[@rtvikkatarya3634]

hey man great video

[@andretorresbr]

Great. Cheers from Brazil.

[@janekmachnicki2593]

Great tutorial

[@whetfaartz6685]

very radical thank u!

[@kumararun6593]

Thanks mate

[@yux1an]

I'm having problems with the csrf token being updated, it updates the token only to the original csrf selected on the macro and does not generate anything new. Any ideas why would this happen?

[@Dilipkumar-by2wu]

I'm having the same issue but in my case it's session_code do you got solution to this?

[@x87-64]

How does Burp know where to put custom parameter in our requests?

[@JSONSEC]

Good question, that's with the curly $ signs

[@x87-64]

@@JSONSEC I meant when set the macro to capture the user_token using that regex thing, how does it automatically put it as the GET parameter user_token. How does it do that?

[@alanadelson4647]

@@x87-64when You have this answer share this with me cause I have this dude Too

[@AgustinJoelTedone]

@@JSONSEC so.. what is the answer?

[@studiospan6426]

Note project options is now moved to settings tab

[@JSONSEC]

Thanks, I might need to redo the video

[@thymos6575]

@@JSONSEC please make a video on running a scan on a target but with pre loaded username and password so the scanner can scan the logged in side of things as well

[@fedemolto]

Thx

[@dulemagija8584]

I don't get it, based on what he generates new csrf tokens every time?

[@JSONSEC]

Exactly, it will automatically update the csrf so you don't have to

[@itsm3dud39]

thens