An easy way to inject up-to-date timestamps into HTTP requests.

If you have an API that needs a current or non-duplicate timestamp value to return properly, you can replace the old timestamp value with "UnixTimeS" to inject the current Epoch time into the call.

Usage

Replace the value of an outdated timestamp in an HTTP request with "UnixTimeS". Burp will automatically inject the current Epoch time into this location.

It will match:

{"timestamp":UnixTimeS}

And replace it with:

{"timestamp":1730346030}

Other possible commands are:

• UnixTimeMS - Injects Epoch time in milliseconds
• TimeStamp - Injects a custom timestamp defined in the UI. I.E. yyyy-MM-dd
• URLTimeStamp - Same as previous command, but URL-encoded

Configuration

Custom time offset

Use the UI interface to define a time offset so injected timestamps occur in either the future or past.

Custom timestamp

Define a custom timestamp format to inject. For example, yyyy-MM-dd.

Custom timestamps are generated using the SimpleDateFormat Java class. Please see their documentation for a list of supported characters.

You can include text as-is into your timestamp with single quotes.

For example:

yyyy-MM-dd'T'HH:mm:ss'Z'

Becomes:

2024-10-31T04:14:02Z