Sticky Burp, Reusable and Replaceable Environment Variables

Create and manage "stickies" (aka Global per-project Environment Variables) from highlighted/selected text across different Burp Suite tabs (think of this extension as the same functionality you get in an API testing and development tool to store variables with raw values that can be used across different views).

This functionality gives you the power to easily store variables in a table and then replace existing payload contents with these variables (ie, in the Repeater or Intruder tab). Common example use-cases for storing and replacing are:

• Exploit Server URL / Collaborator URL
• Authentication tokens/cookies (ie similar to manually testing autorize)
• UUIDs, user accounts, emails/PII etc.
• Dynamically created content from an application's response
  • i.e. SECRET_TOKEN values (see Web Security Academy lab: Exploiting PHP deserialization with a pre-built gadget chain)

Features

Sticky Management

• Create and store stickies (AKA global environment variables) from any selected text in Burp Suite request/response panes
• Stickies store name, value, source information and your own notes
• Replace the values in Repeater tab with the raw value of the previously saved sticky
• Copy stickies values to clipboard with right-click
• Stickies can be colored for easier visibility and are by default colored
• Professional: Stickies are persisted across projects even when burp is quit and reopened

Context Menu Integration

• Right-click selected text to create new stickies
• Quick access to update existing stickies
• Source tracking shows which HTTP request the stickies came from
• Works in Burp tools for both HTTP Requests and Responses (Proxy, Repeater, Target (Site Map) etc.)

Dedicated UI Tab

• Table view of all stored stickies
• Shows stickies name, value, source and your notes

Hotkeys/Shortcuts (No more clicks!)

• Automatically switch to the StickyBurp tab using "CMD"("Control" for Windows users)+"Shift"+"A" to add a new Sticky

Usage

1. Creating Stickies:
   • Select any text in Burp Suite (Proxy, Repeater, etc.)
   • Right-click and choose "Add to stickyburp"
   • Enter a name for your variable
   • The variable will appear in the stickyburp tab
2. Using Stickies:
   • Go to the stickyburp tab to view all stored stickies
   • Click on a variable to copy its value
   • Use copied values in any Burp Suite tool (Repeater, Intruder, etc.)
   • Use quick replace to swap values in requests
3. Managing Stickies:
   • View all stickies in the table
   • See the source of each variable
   • Copy values directly from the table
   • Add new stickies manually if needed