Portswigger’s Burp Suite is a very popular and flexible intercepting proxy tool among web application penetration testers. It can even be easily extended to perform functions that are not directly available in the tool. During this talk Jason will provide an overview of Burp Extender and its API. He will then demonstrate several extensions bundled in his Burp CO2 extension suite.