Hackvertor is an extension for Burp Suite that allows you to tag HTTP traffic you want to encode. You can then convert tagged traffic into an encoded form — or ask Hackvertor to convert it for you when sending a request. That means you can review and edit tagged HTTP traffic without needing to decode it first.
Use this guide to get started with Hackvertor, so you can begin hacking and ‘verting in a way that saves you both time and clicks. Check out Information to get you started below to kick off your Hackvertor journey.
Hackvertor is available for Burp Suite and Burp Suite Community Edition.
Not a Burp Suite customer? You can use Burp Suite Community Edition for free, which you can
There’s more than one way to use Hackvertor. Want to add tags to HTTP traffic then encode in a dedicated Hackvertor tab for later reference? You can do that. Want to run custom code? Go for it.
From custom code execution to encoding on send, here’s some of the things you can do with Hackvertor:
Encode and encrypt — and decode and decrypt — HTTP traffic in a number of Burp Suite areas, including Repeater, Intruder and Proxy.
Transfer HTTP traffic into dedicated Hackvertor tabs, where you can tag, convert and store traffic for later review and reuse.
Tag HTTP traffic for transformation, such as extracting the length of a string or turning all characters in a string to uppercase.
How Hackvertor works with Burp Suite
Hackvertor interacts with Burp Suite in the following ways:
Proxy (Intercept tab): Insert tags into intercepted traffic. Tagged HTTP traffic is automatically converted when forwarded.
Intruder: Use Hackvertor to tag and convert payloads when launching an attack.
Repeater: Tag HTTP traffic for conversion on send.