Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

AMF Deserialization

Philippe | Last updated: Apr 19, 2016 06:43AM UTC

When an AMF response body contains a custom object, BURP can't seem to properly deserialize the body and return a "data - null" instead of the proper object. For the same request/response, Charles proxy seem to be able to deserialize the response just fine. Also in Repeater, in the AMF tab, it is not possible to change the type of a parameter (for instance change from Integer to String). This is possible in Charles proxy. Lastly, in repeater, when the body contains an array, would it be possible to add other elements to the array ? At the moment, we can only modify the value of existing element of the array. I will send a screenshot and a request example to support@portswigger.net.

PortSwigger Agent | Last updated: Apr 20, 2016 07:55AM UTC