Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp suite using HTTP/2 when the site isn't requesting it

Zonduhackerone | Last updated: Oct 20, 2022 07:41PM UTC

I am trying to visit https://opensea.io/ and burp suite changes the connection to http/2 (forces it), cloudflare automatically blocks the connection since the site doesn't support it. I want to stop burp suite of forcing http/2 all the time. I went to "proxy" -> "options" -> "Edit proxy listener" -> untick "Support HTTP/2". it still forces http/2 and I don't know what to do. I don't want to use http/2 at all, and burp suite needs a option to do this (if there isn't already). Please help as the above solution didn't work.

Zonduhackerone | Last updated: Oct 20, 2022 07:48PM UTC

I added: "Use HTTP/1.0 in requests to server" "Use HTTP/1.0 in request to client" and still the proxy uses http/2. Not sure how to fix this, but I am unable to use burp at all like this.

Ben, PortSwigger Agent | Last updated: Oct 21, 2022 10:41AM UTC

Hi, If you navigate to the Project options -> HTTP -> HTTP/2 section of Burp you can then disable the 'Default to HTTP/2 if the server supports it' option in order to prevent the use of HTTP/2 in your outbound connections (essentially, the connection between the browser and Burp can use a different HTTP version to that of the connection between Burp and the target so these need to be configured in separate places within Burp).

Zonduhackerone | Last updated: Oct 22, 2022 05:17AM UTC

In "Project options" I have 3 options: 1) restore defaults 2) load project options 3) save project options Which one I choose? I do not see "HTTP" in project options

Ben, PortSwigger Agent | Last updated: Oct 24, 2022 06:52AM UTC

Hi, I am referring to the tab entitled 'Project options' and not the Project -> Project options menu item - please see the screenshot below: https://snipboard.io/Ewe2oY.jpg

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.