ProfessionalCommunity Edition
Filtering the WebSockets history with Bambdas
-
Last updated: October 29, 2024
-
Read time: 2 Minutes
You can write Java-based Bambdas to create custom filters for your WebSockets history.
Two objects of the Montoya API are available to help you write your Bambdas:
-
ProxyWebSocketMessage
-
Utilities
To create a Bambda to filter your WebSockets history:
-
In the Proxy > WebSockets history tab, click the filter bar to open the WebSockets history filter window.
The filter bar only appears when there is one or more messages in your WebSockets history.
-
In the WebSockets history filter window, click the Bambda mode tab.
-
Write your Bambda using Java.
-
Click Apply.
Burp compiles your Bambda and applies it to every item already logged in your WebSockets history, and to any future WebSockets traffic generated in this project.
Warning
Using slow running or resource-intensive Bambdas can slow down Burp. Write your Bambda carefully to minimize performance implications.
Example Bambda
In the example below, we'll create a Bambda that filters the WebSockets history to show only items that meet the following criteria:
-
The message must be sent from the server.
-
The message payload length must be greater than
300
characters.
return message.payload().length() > 300 && message.direction() == Direction.SERVER_TO_CLIENT;
Converting filter settings to Bambdas
If you have already used Settings mode to configure a WebSockets history filter, you can convert these settings to a Bambda.
Note
Converting your filter settings overwrites any existing Bambda in your WebSockets history.
To convert your filter settings to a Bambda:
-
In the Proxy > WebSockets history tab, click the filter bar to open the WebSockets history filter window.
-
Make changes to the filter settings (if necessary).
-
At the bottom of the WebSockets history filter window, click Convert to Bambda.
Your filter is now converted into a Bambda, enabling you to customize it further using Java.
Related pages
For more information on how to load Bambdas, save your Bambda, or troubleshoot errors with your Bambda, see our Bambdas documentation.