BurpExtractor icon indicating copy to clipboard operation
BurpExtractor copied to clipboard

Published 20 hours ago • verified publisher icon NetSPI

Content-Length does not change when injecting tokens into request bodies

Open ilatypov opened this issue 4 years ago • 2 comments

Content-Length does not change when injecting tokens into request bodies

I am using the version of BurpExtractor from PortSwigger which is currently 11 commits behind the upstream.

ilatypov avatar Oct 05 '20 13:10 ilatypov

The same is observed with this project's latest.

ilatypov avatar Nov 02 '20 22:11 ilatypov

This may cause the very first request(s) of Scan to lock up waiting on HTTP response where the HTTP request did not fill the claimed Content-Length size.

https://forum.portswigger.net/thread/requests-showing-1-status-and-response-length-48aee98c

As a work-around, I wrapped my head around this and "learned" to "turn on" the extractor's rules only after starting the scan and observing new token finds updating in the top of the Extractor tabs.

ilatypov avatar Dec 26 '20 21:12 ilatypov