Burpsuite has an extension called AutoMacroBuilder.
- You can test applications that require pages to be accessed in a specified order, such as shopping carts or member information registration. This extension captures the web application’s multi-step HTTP request sequence, tracks the anti-CSRF token, and tests it using burp tools.
- A OWASP ZAPROXY add-on for recording complex multi-step sequences to evaluate web application vulnerabilities.
- You can test applications that require a specified order of page access, such as shopping carts or member information registration.
Disclaimer: – The intended use for the tool is strictly educational and should not be used for any other purpose.
Download Link: https://github.com/gdgd009xcd/AutoMacroBuilderForZAP