21
Burp Suite's macro recorder gets way more hate than it deserves
At a pentest gig in Austin last month, I watched a junior dev spend two hours hand-crafting a session token script when the built-in macro feature handled it in 10 minutes. I get that it's clunky, but for 90% of auth flows it's faster than custom Python, and I'd rather tweak one config than debug a broken script at 2am. Anyone else actually lean on macros instead of writing custom extensions?
1 comments
Log in to join the discussion
Log In1 Comment
nancy_ross3d agoProlific Poster
Two hours hand-crafting a token script sounds like a great way to bill extra hours, but yeah, I'll take the ugly macro button over debugging regex at 2am too. Clunky is fine when it works, and drunk 2am you is not writing clean Python.
10