Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Case Insensitive URLs

Admin | Last updated: Nov 30, 2020 03:18PM UTC

Dear PortSwigger, Currently trialing BurpSuite Pro. Was confused to provide a list of included URLs to target and found BurpSuite reporting 'page not found' for all of them. Looked more closely and it appears that BurpSuite is taking my CamelCase URLs and converting them into lower case. e.g. I specify... https://portswigger.net/burp/documentation/desktop/functions/urlMatching BurpSuite converts it to ... https://portswigger.net/burp/documentation/desktop/functions/urlmatching All my Routes are camelCase!! Checking the BurpSuite docs, it suggests... "URL-matching rules URL-matching rules are used in various locations within Burp, to define URL-based scoping for various functions, such as general Target scope, the scope of individual functions like live scanning, URLs returning streaming responses, and the scope of session handling rules. You can configure URL-based scoping in normal or advanced mode. Normal mode performs better in mode situations, but advanced mode provides more power and flexibility where needed. Both types of scope control rules are case insensitive." I have done a web-search and whilst there is the suggestion that lower case URLs are more sensible/acceptable, (https://stackoverflow.com/questions/10302179/hyphen-underscore-or-camelcase-as-word-delimiter-in-uris) there appears to be no definitive Thou Shalt Not Use camelCase URLs. It seems that in order to use BurpSuite, i'm going to either have to convert all the routes in my application to either kebab-case or snake_case or lower case, or create duplicate routes specifying both camelCase and lower case endpoints. The first is a mammoth task, the second is a complete hack. Please, please tell me that i am missing something and Burp Suite can parse camelCase URLs. Or is my appreciation of acceptable URL naming conventions fundamentally flawed and i just need to suck it up and refactor my application? Thanks in advance!

Michelle, PortSwigger Agent | Last updated: Dec 01, 2020 02:34PM UTC