Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp changes http headers even when not told to

rafael | Last updated: May 08, 2021 03:12PM UTC

I'm using the latest version of burp community "burpsuite_community_v2021.4.3" the jar version and it is changing the HTTP response headers even when told not to. burp has set all headers to have first Letter capital server will responde HTTP/2 200 OK ANYTHINg-MIxeD-leTTers: mixed ANYTHING-ALL-CAPS: allCaps anything-all-min: allmin Date: Sat, 08 May 2021 12:59:07 GMT Content-length: 2 {} but burp will log as: HTTP/2 200 OK Anything-Mixed-letters: mixed Anything-All-Caps: allCaps Anything-All-Min: allmin Date: Sat, 08 May 2021 12:59:07 GMT Content-Length: 2 {} i know http2 is case insensitive but should not be burp choice to alter the headers in any way... this caused a bug in my request to be masked because the header had changed. is there any way to disable this feature and retrieve the original response headers for http2?

Uthman, PortSwigger Agent | Last updated: May 10, 2021 09:31AM UTC

Hi Rafael, You are correct in that the headers are being capitalized automatically. Can you please share the information below with support@portswigger.net? - Diagnostics (Help > Diagnostics) - More details on the bug in your request - please include screenshots or the full URL

Pushker | Last updated: May 21, 2021 07:05AM UTC

same behavior is for request headers too. there is no option to attach a screenshot. attached ss in external tool request in chrome browser : https://snipboard.io/8Ou5xW.jpg headers modified in proxy : https://snipboard.io/auCtDH.jpg

Uthman, PortSwigger Agent | Last updated: May 21, 2021 08:46AM UTC

Pushker, it looks like you are sending an HTTP/1.1 request in Burp whilst your browser is sending an HTTP/2 request. Is that accurate? Can you email support@portswigger.net with further details?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.