Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Best approach for web-application testing with a webservice.

Matt | Last updated: Sep 08, 2015 02:50PM UTC

The data flow works like this: Browser -> Application -> Webservice -> Application -> Browser I'd like to be able to fuzz the flow where the webservice is sending data back to the application so that I can attack the browser. While I'm aware I can route all traffic through the same instance of Burp, what I need is a passive fuzzing, where I can send the same request from the browser and have the fuzzer do its job on responses instead of on requests. Is this even possible?

PortSwigger Agent | Last updated: Sep 09, 2015 08:29AM UTC