Professional Community

OAuth2 Token Grabber

Burp Suite extension to grab OAuth2 access tokens and add them to requests as a custom header.

Currently supported auth flows:

  • Client Credentials
  • Password Credentials
  • Resource Owner Password Credentials (ROPC)

Usage

  • Select desired grant type & client authentication method
  • (Optional) Set a custom header for access tokens to be added to
  • Input token URL
  • Input relevant credentials and scope
  • Hit 'Test'. You should receive an access token (Otherwise, try debug mode)
  • Select desired tool scope
  • Hit 'Activate'. The access token will then be added to all in scope traffic
  • When the access token expires, a new one will be requested automatically

Author

Author

0kman

Version

Version

1.0

Rating

Rating

Popularity

Popularity

Last updated

Last updated

17 June 2022

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.