ATOR – Authentication Token Obtain and Replace – Burp Suite plug-in for complex session mechanisms

Come on burp suite tool has a built-in session mechanism, more and more often I meet situations where i just can not cope with keeping it active. This is most often caused by one of the following factors: Dynamic CSRF tokens hidden in different places of the request; JavaScript-based applications… Continue reading