We’re rewarding the question askers & reputations are being recalculated! Read more.
2 Include affiliation
source | link

Burp supports Macros and Session Handling Rules that are designed to cope with this kind of situation. For example, you can configure a macro that fetches a fresh token, and a rule that updates the current request. This can be used with all Burp tools, including Intruder and Scanner. There's some more information here.

The built-in rules cannot update tokens in the URL. However, the Custom Parameter Handler extension lets you do that.

It can be a little bit fiddly to set this up, but it is possible to configure working session rules for most sites. You also have the option of coding your own extension.

Affiliation: Burp Suite is a commercial product of ours.

Burp supports Macros and Session Handling Rules that are designed to cope with this kind of situation. For example, you can configure a macro that fetches a fresh token, and a rule that updates the current request. This can be used with all Burp tools, including Intruder and Scanner. There's some more information here.

The built-in rules cannot update tokens in the URL. However, the Custom Parameter Handler extension lets you do that.

It can be a little bit fiddly to set this up, but it is possible to configure working session rules for most sites. You also have the option of coding your own extension.

Burp supports Macros and Session Handling Rules that are designed to cope with this kind of situation. For example, you can configure a macro that fetches a fresh token, and a rule that updates the current request. This can be used with all Burp tools, including Intruder and Scanner. There's some more information here.

The built-in rules cannot update tokens in the URL. However, the Custom Parameter Handler extension lets you do that.

It can be a little bit fiddly to set this up, but it is possible to configure working session rules for most sites. You also have the option of coding your own extension.

Affiliation: Burp Suite is a commercial product of ours.

1
source | link

Burp supports Macros and Session Handling Rules that are designed to cope with this kind of situation. For example, you can configure a macro that fetches a fresh token, and a rule that updates the current request. This can be used with all Burp tools, including Intruder and Scanner. There's some more information here.

The built-in rules cannot update tokens in the URL. However, the Custom Parameter Handler extension lets you do that.

It can be a little bit fiddly to set this up, but it is possible to configure working session rules for most sites. You also have the option of coding your own extension.