Ator - Authentication Token Obtain and Replace Extender

Web: http://www.kitploit.com/2023/03/ator-authentication-token-obtain-and.html

The plugin is created to help automated scanning using Burp in the following scenarios:

1. Access/Refresh token
2. Token replacement in XML,JSON body
3. Token replacement in cookies
   The above can be achieved using complex macro, session rules or Custom Extender in some scenarios. The rules become tricky and do not work in scenarios where the replacement text is either JSON, XML.

Key advantages:

1. We have also achieved in-memory token replacement to avoid duplicate login requests like in both custom extender, macros/session rules. …

ator authentication authentication token scanning taken token