Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

200 w/ Burp, 403 without

Ryan | Last updated: Oct 24, 2023 05:36PM UTC

Hey y'all, I've hit an issue where doing some POC work in python w/ requests, pycurl libs results in a 403 when hitting an endpoint but when proxying through Burp I get a 200 response. Aside from the obvious things like headers which are identical between the requests, I'm not sure what else Burp can tell me about the outbound request. Are there any TLS / connection debug logs I can enable to see what is being negotiated between the proxy and the endpoint? Also, anyone else seen this before?

Michelle, PortSwigger Agent | Last updated: Oct 25, 2023 09:29AM UTC

Can you send an email to support@portswigger.net with a few more details of the request you're sending so we can take a closer look at this with you? It would be good to see the request and response as you see it when not proxying via Burp and what you see when proxying via Burp (both in the Proxy History and the Logger tab). Do you have any extensions installed in Burp? If you so, does disabling them change the behavior at all?

Ryan | Last updated: Oct 25, 2023 02:43PM UTC

Certainly! No additional extensions installed.

Michelle, PortSwigger Agent | Last updated: Oct 26, 2023 07:19AM UTC