Skip to content

Extension for semi-automated search for second order issues in webapps

License

Notifications You must be signed in to change notification settings

hvqzao/burp-second-order

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Second Order

Second order issues are being introduced using one request, while their effect is on response of different, unrelated request. This extension aims to support tester with semi-automated solution towards discovering such issues.

This functionality can be accomplished using Burp alone, but I personally find this extension way to be both quicker and less distracting when conducting tests.

second-tab

second-menu

Requires Java 8.

This extension DOES NOT require Burp Suite Professional

Download

https://github.com/hvqzao/burp-second-order/releases/download/1.0/second-order.jar

License

MIT License