This method is used to obtain the HTTP headers contained in the request. @return The HTTP headers contained in the request.

This method is used to register a new Scanner issue. <b>Note:</b> Wherever possible, extensions should implement custom Scanner checks using <code>ISc

This method returns the HTTP service for which the issue was generated. @return The HTTP service for which the issue was generated.

This method is used to retrieve a property of the interaction. Properties of all interactions are: interaction_id, type, client_ip, and time_stamp. Pr

This method can be used to issue HTTP requests and retrieve their responses. @param httpService The HTTP service to which the request should be sent.

This method can be used to analyze an HTTP request, and obtain various key details about it. @param request An <code>IHttpRequestResponse</code> obje

This method is used to retrieve all interactions received by the Collaborator server resulting from payloads that were generated for this context. @r

This method builds an HTTP message containing the specified headers and message body. If applicable, the Content-Length header will be added or update

This method returns the URL for which the issue was generated. @return The URL for which the issue was generated.

Run tests in the path to see if we can get any interactions. @param method @param issues @param reqInfo @param content @param service

NOTE: Run SSRF tests in the Referer Header, this is generally blind and worst case. May not get impact with this issue. @param method @param issues @

Run tests against the User-Agent header to see if there is any Blind SSRF shellshock issues. @param method @param issues @param reqInfo @param content

Run Tests against the Host Header to see if there are any routing issues. @param method @param issues @param reqInfo @param content @param service

Run SSRF tests on Parameters. @param method @param issues @param reqInfo @param content @param request @param service

Override the X-Forwarded-Host header to test for SSRF @param method @param issues @param reqInfo @param content @param service

This method is used to generate new Burp Collaborator payloads. @param includeCollaboratorServerLocation Specifies whether to include the Collaborato

This method is used to obtain the HTTP method used in the request. @return The HTTP method used in the request.

This method is used to retrieve the parameter name. @return The parameter name.

This method is used to update the currently displayed text in the editor. @param text The text to be displayed.

Checks to see if any interactions are not coming from us. @return

Runs various tests against the request to find any interactions @param content @param issues

This method is used to add a custom tab to the main Burp Suite window. @param tab An object created by the extension that implements the <code>ITab</

This method constructs an <code>IParameter</code> object based on the details provided. @param name The parameter name. @param value The parameter va

This method is used to create a new Burp Collaborator client context, which can be used to generate Burp Collaborator payloads and poll the Collaborat

This method is used to retrieve interactions received by the Collaborator server resulting from a single payload that was generated for this context.

This method is used to obtain an <code>IExtensionHelpers</code> object, which can be used by the extension to perform numerous useful tasks. @return

This method is used to obtain the parameters contained in the request. @return The parameters contained in the request.

This method is used to retrieve the request message. @return The request message.

This method is used to obtain the current extension's standard output stream. Extensions should write all output to this stream, allowing the Burp use

This method is used to retrieve the currently displayed text. @return The currently displayed text.

This method is used to retrieve the parameter type. @return The parameter type. The available types are defined within this interface.

This method can be used to query whether a specified URL is within the current Suite-wide scope. @param url The URL to query. @return Returns <code>t

This method is used to register a listener which will be notified of changes to the extension's state. <b>Note:</b> Any extensions that start backgrou

This method is used to register a custom Scanner check. When performing scanning, Burp will ask the check to perform active or passive scanning on the

This method is used to set the display name for the current extension, which will be displayed within the user interface for the Extender tool. @para

This method updates the value of a parameter within an HTTP request, and if appropriate updates the Content-Length header. <b>Note:</b> This method ca

This method adds a new parameter to an HTTP request, and if appropriate updates the Content-Length header. @param request The request to which the pa

This method can be used to add an item to Burp's site map with the specified request/response details. This will overwrite the details of any existing

This method can be used to analyze an HTTP response, and obtain various key details about it. @param response The response to be analyzed. @return An

This method analyzes one or more responses to identify the number of occurrences of the specified keywords and returns an <code>IResponseKeywords</cod

This method analyzes one or more responses to identify variations in a number of attributes and returns an <code>IResponseVariations</code> object tha

This method is used to apply markers to an HTTP request or response, at offsets into the message that are relevant for some particular purpose. Marker

This method can be used to Base64-decode the specified data. @param data The data to be decoded. @return The decoded data.

This method can be used to Base64-encode the specified data. @param data The data to be encoded. @return The encoded data.

This method creates a GET request to the specified URL. The headers used in the request are determined by the Request headers settings as configured i

This method constructs an <code>IHttpService</code> object based on the details provided. @param host The HTTP service host. @param port The HTTP ser

This method is used to build a request with the specified payload placed into the insertion point. There is no requirement for extension-provided inse

This method can be used to convert data from an array of bytes into String form. The conversion does not reflect any particular character set, and a b

This method allows the scan queue item to be canceled.

The Scanner invokes this method when the custom Scanner check has reported multiple issues for the same URL path. This can arise either because there

This method will be called by Burp when the user invokes a context menu anywhere within Burp. The factory can then provide any custom context menu ite

This method is used to create a new instance of Burp's HTTP message editor, for the extension to use in its own UI. @param controller An object creat

Burp will call this method once for each HTTP message editor, and the factory should provide a new instance of an <code>IMessageEditorTab</code> objec

This method is used by Burp when the user starts an Intruder attack that uses this payload generator. @param attack An <code>IIntruderAttack</code> o

This method is used to create a new instance of Burp's plain text editor, for the extension to use in its own UI. @return An object that implements t

This method is used to customize UI components in line with Burp's UI style, including font size, colors, table line spacing, etc. The action is perfo

This method is deprecated and no longer performs any action.

This method is deprecated and no longer performs any action.

The Scanner invokes this method for each insertion point that is actively scanned. Extensions may issue HTTP requests as required to carry out active

This method can be used to send an HTTP request to the Burp Scanner tool to perform an active vulnerability scan. If the request is not within the cur

Scan passively with burps scanning capabilities. @param content

The Scanner invokes this method for each base request / response that is passively scanned. <b>Note:</b> Extensions should only analyze the HTTP messa

This method can be used to send an HTTP request to the Burp Scanner tool to perform a passive vulnerability scan. @param host The hostname of the rem

This method can be used to exclude the specified URL from the Suite-wide scope. @param url The URL to exclude from the Suite-wide scope.

This method can be used to shut down Burp programmatically, with an optional prompt to the user. If the method returns, the user canceled the shutdown

This method is called when the extension is unloaded.

This method is used to retrieve all interactions made by Burp Infiltrator instrumentation resulting from payloads that were generated for this context

This method is used to retrieve interactions made by Burp Infiltrator instrumentation resulting from a single payload that was generated for this cont

This method is used to generate a report for the specified Scanner issues. The report format can be specified. For all other reporting options, the de

This method is used by Burp to obtain the name of the session handling action. This will be displayed as an option within the session handling rule ed

This method is used to obtain the value of an individual attribute in a response. Note that the values of some attributes are intrinsically meaningful

This method returns the base value for this insertion point. @return the base value that appears in this insertion point in the base request being sc

This method is used to obtain the offset within the request where the message body begins. @return The offset within the request where the message bo

This method is used to obtain the offset within the response where the message body begins. @return The offset within the response where the message

This method is used to retrieve the contents of the buffer that was saved in the temporary file. @return The contents of the buffer that was saved in

This method retrieves information about the version of Burp in which the extension is running. It can be used by extensions to dynamically adjust thei

This method retrieves the client IP address from which the request for the intercepted message was received. @return The client IP address from which

This method is used to retrieve the network location of the Collaborator server. @return The hostname or IP address of the Collaborator server. @thr

This method returns the command line arguments that were passed to Burp on startup. @return The command line arguments that were passed to Burp on st

This method is used to retrieve the user-annotated comment for this item, if applicable. @return The user-annotated comment for this item, or null if

This method returns the UI component of the editor, for extensions to add to their own UI. @return The UI component of the editor.

This method returns the UI component of the editor, for extensions to add to their own UI. @return The UI component of the editor.

This method returns the issue confidence level. @return The issue confidence level. Expected values are "Certain", "Firm" or "Tentative".

This method is used to obtain the content type of the message body. @return An indication of the content type of the message body. Available types ar

This method is used to retrieve the context menu factories that are registered by the extension. @return A list of context menu factories that are cu

This method is used to retrieve the contents of Burp's session handling cookie jar. Extensions that provide an <code>ISessionHandlingAction</code> can

This method is used to obtain details of the HTTP cookies set in the response. @return A list of <code>ICookie</code> objects representing the cookie

This method is used to retrieve the domain for which the cookie is in scope. @return The domain for which the cookie is in scope. <b>Note:</b> For co

This method is used to retrieve the expiration time for the cookie. @return The expiration time for the cookie, or <code>null</code> if none is set (

This method retrieves the absolute path name of the file from which the current extension was loaded. @return The absolute path name of the file from

This method is used to retrieve the extension state listeners that are registered by the extension. @return A list of extension state listeners that

This method is used by Burp to obtain the name of the payload generator. This will be displayed as an option within the Intruder UI when the user sele

This method parses the specified request and returns details of each HTTP header. @param message The request to be parsed. @return An array of HTTP h

This method is used to obtain the HTTP headers contained in the response. @return The HTTP headers contained in the response.