Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp intruder's match/replace rule for {FILE}

Viparva | Last updated: Feb 17, 2022 06:23AM UTC

When I tried to use Burp intruder's match/replace rule for {FILE}, I get invalid regex error. Please advice.

Michelle, PortSwigger Agent | Last updated: Feb 17, 2022 02:49PM UTC

Thanks for your message. Can you describe the rule you are trying to create, please? If you use \{FILE\} does this achieve the results you are looking for in your payloads? If you can send us some screenshots of your rule configuration and an explanation of the effect you are looking to achieve via the payload processing rules to support@portswigger.net, we can take a closer look into this for you.

shivam | Last updated: May 05, 2022 01:29PM UTC

yes, same with me! how to correct it.

Uthman, PortSwigger Agent | Last updated: May 05, 2022 01:45PM UTC

Hi Shivam,

By 'match/replace', are you referring to Grep-Extract? Or are you using an extension to match and replace a part of the request or response?

The correct regex for {FILE} would be (\{FILE})

Can you give this a try? If it does not work, please send us the same information Michelle requested from Viparva. You can reach us at support@portswigger.net

shivam | Last updated: May 06, 2022 08:49AM UTC

thanks! it worked.

Uthman, PortSwigger Agent | Last updated: May 06, 2022 12:19PM UTC

Thanks for the feedback!

Feel free to reach out if you have any further queries or issues.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.