Burp Variables

Burp Variables adds variable storage and replacement to Burp Suite. Define variables once and reference them across requests using ((variableName)) notation, similar to environment variables in Postman or Insomnia.

Features

• Store and manage variables in a dedicated tab, providing a single place to update tokens, credentials, and identifiers
• Variable references can be automatically replaced in outgoing requests from the Repeater, Proxy, Intruder, Scanner, and Extensions tools
• Proxy variable replacement is restricted to in-scope requests, preventing variable values from being sent to unintended destinations
• Auto-updating variables can extract values from HTTP responses using a regex capture group, keeping tokens and session IDs current automatically
• Use the right-click context menu in requests to insert variable references at the cursor or replace selected text
• Import and export variables as CSV for backup or sharing across projects

Usage

1. Navigate to the "Variables" tab and add name-value pairs
2. Add variable references to any outgoing request, using the notation ((variableName))
3. Send the request. Variable references are replaced with their stored values before the request leaves Burp
4. Verify replacements occurred by inspecting the sent request in the "Logger" tool