Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

2024.7.5, Montoya API, Extensions, Custom Editor Tab, Modified Requests Not Forwarded

Tobias | Last updated: Sep 01, 2024 07:44PM UTC

I have received a bug report about our SAMLRaider extension that the modified requests are not being forwarded correctly. This problem occurs with the new BurpSuite version 2024.7.5. I can reproduce the bug, but I am not sure what is causing it. So I tried your example from https://github.com/PortSwigger/burp-extensions-montoya-api-examples/tree/main/customrequesteditortab. It turns out that your example code is also prone to this bug and does not work. For more details see https://github.com/CompassSecurity/SAMLRaider/issues/74

Hannah, PortSwigger Agent | Last updated: Sep 02, 2024 02:54PM UTC

Thanks for the report! We've replicated this issue and have raised a bug ticket to look into this further. As a workaround, you can change the tab view to a different tab view (e.g., the "Pretty" tab) before forwarding the request. This should mean that the updated, edited request gets sent. I appreciate that this is not an ideal solution for a user's workflow. Please let us know if there's anything else we can help with in the meantime.

Ed | Last updated: Sep 03, 2024 01:03PM UTC

I was the original SAMLRaider issue reporter. How will I know when this bug has been fixed in BurpSuite? Will there be a reply to this forum post, or a Github issue, or....? Thanks for addressing the bug!

Hannah, PortSwigger Agent | Last updated: Sep 04, 2024 12:42PM UTC

Hi When released, this will likely be mentioned in the release notes. We may also update this forum post. Unfortunately, due to our release cycles and current work, this is not likely to be fixed soon, as it will not make it into our upcoming(ish) 2024.9 release. If there's anything else we can help with in the meantime, please let us know.

Tobias | Last updated: Sep 08, 2024 06:12PM UTC

Hi Hannah, Is there a programmatic workaround we can implement in our extension to provide a temporary solution in the meantime? Tobias

Hannah, PortSwigger Agent | Last updated: Sep 09, 2024 04:36PM UTC

Hi Tobias Unfortunately, there is no workaround available other than manually changing the tabs. The last version where this was working is v2024.6.6. I'm sorry I can't be of more assistance with this.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.