Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Burp Suite not adding custom header

Ezau | Last updated: Aug 13, 2024 07:25PM UTC

Hi. I'm trying to add a custom header to all requests. There is an option in the 'Session Handling Rule Editor' that does that, or at least it seems that way. The option is 'Set a specific header value' and it has a checkbox that says 'Add if not present'. Seems to me that this option should add the defined header, but it's not working. I defined a header and it's value, but it is not being added to the requests (the header doesn't appear in the target not in the proxy tabs). I know there's an extension that adds custom headers, but shouldn't this configuration do the same thing? I would prefer not using the extension. I think it's a bug, but is this correct or a I misunderstood the configuration?

Ezau | Last updated: Aug 13, 2024 09:37PM UTC

I believe I found a solution. I'm using match and replace rules to add the custom header. It seems it's working, but now I have a new question. In order to see the modified requests in the HTTP history, I have to change the view from 'Original request' to 'Auto-modified request'. So just to make clear, the request the was sent was the modified request, even though I need to 'change the view mode', right?

Ben, PortSwigger Agent | Last updated: Aug 14, 2024 07:21AM UTC