Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Burp changes http headers even when not told to

rafael | Last updated: May 08, 2021 03:12PM UTC

I'm using the latest version of burp community "burpsuite_community_v2021.4.3" the jar version and it is changing the HTTP response headers even when told not to. burp has set all headers to have first Letter capital server will responde HTTP/2 200 OK ANYTHINg-MIxeD-leTTers: mixed ANYTHING-ALL-CAPS: allCaps anything-all-min: allmin Date: Sat, 08 May 2021 12:59:07 GMT Content-length: 2 {} but burp will log as: HTTP/2 200 OK Anything-Mixed-letters: mixed Anything-All-Caps: allCaps Anything-All-Min: allmin Date: Sat, 08 May 2021 12:59:07 GMT Content-Length: 2 {} i know http2 is case insensitive but should not be burp choice to alter the headers in any way... this caused a bug in my request to be masked because the header had changed. is there any way to disable this feature and retrieve the original response headers for http2?

Uthman, PortSwigger Agent | Last updated: May 10, 2021 09:31AM UTC

Hi Rafael, You are correct in that the headers are being capitalized automatically. Can you please share the information below with support@portswigger.net? - Diagnostics (Help > Diagnostics) - More details on the bug in your request - please include screenshots or the full URL

Pushker | Last updated: May 21, 2021 07:05AM UTC

same behavior is for request headers too. there is no option to attach a screenshot. attached ss in external tool request in chrome browser : https://snipboard.io/8Ou5xW.jpg headers modified in proxy : https://snipboard.io/auCtDH.jpg

Uthman, PortSwigger Agent | Last updated: May 21, 2021 08:46AM UTC