Skip to content

RefactorSecurity/burp-tab-autonamer

Repository files navigation

Tab Autonamer

Tab Autonamer is a Burp Suite extension that automatically generates meaningful, customizable names for Repeater and Intruder tabs based on HTTP request details.

Features

  • Smart tab naming: Generates descriptive tab names from request URL components
  • Configurable title components: Choose which URL parts to include:
    • HTTP Method (GET, POST, etc.)
    • Scheme (http/https)
    • Host and port (non-standard ports are preserved)
    • Path
    • Query string
    • Anchor/fragment
  • Scope-aware shortening: Option to exclude host/scheme for in-scope URLs
  • Query string privacy: Option to hide query string values while keeping parameter names
  • Length control: Set maximum title length with automatic truncation (0 = unlimited)
  • GraphQL mode:
    • Names GraphQL requests based on operation type and name (e.g., query GetUser, mutation CreatePost, subscription OnUpdate)
    • Configurable endpoint path (default /graphql)
    • Configurable JSON operation field (default operationName)
    • Falls back to parsing the query field if operationName is missing
  • Hotkeys:
    • Cmd+G / Ctrl+G - Send to Repeater with smart name
    • Cmd+J / Ctrl+J - Send to Intruder with smart name
  • Context menu integration: Right-click actions for send/rename
  • Rename current tab: Rename the active Repeater or Intruder tab with the generated name
  • Rename all unnamed tabs: Bulk-rename numeric tabs (1, 2, 3, …) with confirmation
  • Live preview: See how your settings affect tab names in real-time

Note: WebSockets are not supported (Burp API limitation).

Screenshots

Tabs renamed in Repeater:

Repeater tabs with auto-generated names

Context menu options:

Menu items for renaming tabs

Settings tab:

Extension settings panel

Installation

Manual Installation

  1. Download the latest JAR from the Releases page
  2. Open Burp Suite
  3. Go to Extensions > Installed
  4. Click Add
  5. Select the downloaded JAR file

Usage

Hotkeys

Hotkey Action
Cmd+G / Ctrl+G Send to Repeater with smart name
Cmd+J / Ctrl+J Send to Intruder with smart name

Where hotkeys work:

  • Any view where Burp provides a selected request (e.g., Proxy HTTP history, Site map tables, message editors, Intruder attack results, Proxy intercept)

Sending Requests

Using Hotkey (Recommended):

  1. Select one or more requests in any supported view
  2. Press Cmd+G (Repeater) or Cmd+J (Intruder)
  3. Requests are sent with auto-generated names

Using Context Menu:

  1. Right-click on a request
  2. Select Send to Repeater (Named) or Send to Intruder (Named)

Renaming Existing Tabs

Rename Current Tab:

  1. Right-click within a Repeater or Intruder tab
  2. Select Rename tab
  3. The tab will be renamed based on its request using your configured settings

Rename All Unnamed Tabs:

  1. Right-click within Repeater or Intruder
  2. Select Rename all unnamed tabs
  3. Confirm the action in the dialog
  4. All tabs with numeric names (1, 2, 3, etc.) will be renamed with auto-generated names

Note: The "Rename all unnamed tabs" option only appears when right-clicking within Repeater or Intruder, and only renames tabs for the tool where you invoked the action.

Configuration

Open the Tab Autonamer tab in Burp Suite to configure:

Title Components:

  • Toggle which URL parts to include in generated names

Options:

  • Hide query string values: Shows parameter keys only (e.g., ?id=&token=)
  • Exclude host/scheme when in scope: Shorter names for in-scope targets
  • Maximum title length: Truncate long names

GraphQL Settings:

  • Enable GraphQL mode (enabled by default): When enabled, requests to GraphQL endpoints are named based on operation type and name (query/mutation/subscription)
  • Endpoint path: The URL path that identifies GraphQL endpoints (default: /graphql)
  • Operation field: The JSON field containing the operation name (default: operationName)

Live Preview:

  • Enter a sample URL to see how your settings affect the generated name

Examples

Standard Requests:

Settings Sample URL Generated Title
Method + Host + Path https://api.example.com/users/123 GET api.example.com/users/123
Method + Path only https://api.example.com/users/123 GET /users/123
With query (hidden values) https://example.com/search?q=test&page=1 GET example.com/search?q=&page=

GraphQL Requests:

Request Body Generated Title
{"operationName": "GetUser", "query": "..."} query GetUser
{"operationName": "CreatePost", "query": "..."} mutation CreatePost
{"query": "query GetUsers { users { id name } }"} query GetUsers
{"query": "subscription OnUpdate { updates { id } }"} subscription OnUpdate

Building from Source

# Clone the repository
git clone https://github.com/RefactorSecurity/burp-tab-autonamer.git
cd burp-tab-autonamer

# Build with Gradle
./gradlew build

# JAR will be at build/libs/tab-autonamer-1.0.jar

Requirements

  • Burp Suite Professional or Community Edition
  • Java 17 or higher

License

This project is licensed under the MIT License - see the LICENSE.md file for details.

Contributing

Contributions are welcome! Please feel free to submit issues and pull requests.

About

A Burp Suite extension that allows you to automatically name Repeater and Intruder tabs based on configurable request/response patterns.

Topics

Resources

License

Stars

Watchers

Forks

Packages

 
 
 

Contributors

Languages