Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Active scan on API with HTTP/2

Filippo | Last updated: Feb 07, 2023 01:40PM UTC

Is there any way to perform active scans on an API for a server that uses HTTP2 only? I currently have no problem with the Repeater making HTTP2 requests, but if I send the request for an active scan, HTTP2 is not used or when used, there is no pseudo-header, resulting in no response from the server. Is there any option that forces the scanner to use HTTP2 for all requests with the pseudo header set in the Repeater? Thanks

Michelle, PortSwigger Agent | Last updated: Feb 07, 2023 04:57PM UTC