Is there an extension for Burp Pro that will allow you to do something like the following?
Alice launches Burp Suite Pro & launches its browser. Bob does the same.
Alice logs in to a website with multiple layers of MFA that nevertheless doesn't do any kind of stateful IP/geolocation tracking at the firewall or CDN.
Alice launches HypotheticalPlugin, right clicks the most recent request to that site, and chooses an option like "bundle session for transfer".
The request and response get compressed, bundled up as base64, and copied into the clipboard buffer as a blob of pastable text.
Alice pastes it into a chat window in Microsoft Teams and sends the blob of text to Bob.
Bob copies the blob from the chat window, finds HypotheticalPlugin's tab in Burp, and pastes it into a textbox after clicking something like "transfer session".
Bob goes to Burp's browser, and goes to https://irrelevant-url.com
HypotheticalPlugin intercepts the request, and returns a 302 redirect to the URL Alice is transferring
Burp's browser makes a request to the redirected URL, and receives Alice's response... plus, any cookies that weren't assigned by the most-recent response have set-cookie directives added as well.
At this point, in theory, Bob is Alice and her active session as far as the target website is concerned. Bob's browser is presenting Alice's cookies, and behaving exactly as if he'd reached that first page by logging in and plowing through the site himself to get to that point.
Anyway, I can think of some ways to accomplish something like this manually (basically, building upon the steps I listed)... but has anyone already written a plugin to facilitate & automate something like this?
I know I can do things like set up Burp to perpetually intercept requests and replace cookie values... but that's brittle, because if the app itself decides to change the cookie values, interceptor will still be blindly overwriting them and cause the session to break at that point. And honestly, kind of a pain. If no such plugin already exists, I'll probably try writing one of my own to do it... but I don't want to waste time reinventing the wheel if someone has already done it (or if there's something I've overlooked that would conclusively make it impossible).
I did a few searches through the Burp appstore plugin list, but so far I haven't found anything that looks quite right (including the part about "transfer it from Alice to Bob via IM")
