Custom actions are scripts that run directly from Burp Repeater to extract, analyze, and transform data. You can use custom actions to:
Analyze responses - Extract data, count elements, decode and encode messages, and check for specific content.
Retrieve additional data - Perform lookups, resolve hostnames, fetch external data, and use this data to modify the request or response.
Resend requests - Modify headers, parameters, or body content and resend the request.
Use AI features - Analyze messages, generate payloads based on context, or transform data using AI.
To try custom actions, open the Custom actions side panel in Repeater and click Add samples to load some ready-to-use examples.
You can also import community-created scripts from our GitHub repository into your Bambda library. This is your personal collection of reusable scripts. These scripts can be loaded into the Custom actions side panel whenever you need them, making it easy to use and adapt scripts created by others.
Creating your own custom actions enables you to tailor Repeater to your workflow. Scripts can be as simple as a few lines of code, and small actions can be highly useful. We provide templates, examples, and writing guides to help you get started. The built-in editor helps you develop, troubleshoot, and test your scripts as you go. Once you've written a script, you can save it to your Bambda library for reuse.