Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Add a "Response Received" column in Proxy History

Jon | Last updated: Apr 04, 2016 05:34PM UTC

This column already exists in Intruder results (though not shown by default), and it would be very helpful for some situations in the Proxy History. For example, I've proxied sqlmap through Burp before, and unless I'm watching it carefully as it runs, it can be difficult to isolate requests where there was a much longer response time. (Yes, I could take the payloads out of history and request them again through Intruder, but that is way more work than getting this information should require.)

PortSwigger Agent | Last updated: Apr 04, 2016 10:19PM UTC

Thanks - we have this request captured in our backlog.

Burp User | Last updated: Apr 06, 2016 08:36PM UTC

+1! Delays are very useful for SQLI, SSRF, XXE, ... If Burp Suite has the information, it should be displayable to the user. For "Proxy History", an optional column would be fine

Burp User | Last updated: Jul 18, 2017 10:51PM UTC

Ping! Any news?

Liam, PortSwigger Agent | Last updated: Jul 19, 2017 09:18AM UTC

We don't have anything to report at the moment. We'll let you know when we do.

Burp User | Last updated: Sep 14, 2017 09:13AM UTC

+1 even finding out which legitimate requests take too much time, you can easily find bottleneck in the service and misuse the intended functionality for DoS.

Rose, PortSwigger Agent | Last updated: Sep 14, 2017 01:04PM UTC

Unfortunately, we don't have an update on this but it is still in our pipeline.

Burp User | Last updated: Apr 18, 2019 07:15AM UTC

Any update on this?

Burp User | Last updated: Sep 03, 2019 07:29AM UTC

This column will be very helpful, please consider adding it

Ben, PortSwigger Agent | Last updated: Sep 03, 2019 10:28AM UTC

As noted, we will update this thread when we have some further news about this feature.

Burp User | Last updated: Dec 03, 2019 11:09AM UTC

instead of adding just one column (or reorder column as asked by another user), wouldn't it be better to let the user which column to show and add/remove like wireshark does?

Burp User | Last updated: Jan 10, 2020 06:07PM UTC

+1

SICST | Last updated: Mar 24, 2023 07:59PM UTC

+1 Same here. I would like to visualize how an attack slows down the automatic REST requests of an application. A respective column in the HTTP History would be a straight forward way.

Ben, PortSwigger Agent | Last updated: Mar 27, 2023 04:50PM UTC

Hi, The Logger tool has both a 'Start response timer' and an 'End response timer' column - does this suit your requirements?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.