Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

curl 400 bad request

zobi | Last updated: Dec 05, 2018 03:05PM UTC

I want to connect to a website without browser, with curl. I set up an http proxy (burp community edition) to see how my browser connects to this website. I clear all history (including cookies) and restart my browser. Here is what the proxy gives (as http request): GET / HTTP/1.1 Host: xxx.xxxxxxxxx.xx User-Agent: Mozilla/5.0 (X11; Linux i686; rv:60.0) Gecko/20100101 Firefox/60.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: close so I translate this into curl within a file (let's called it curl.test): curl -i -s -k --head -o curlOutput -X $'GET' \ -H $'Host: https://www.xxxxxxxxx.xx' \ -H $'User-Agent: Mozilla/5.0 (X11; Linux i686; rv:60.0) Gecko/20100101 Firefox/60.0' \ -H $'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \ -H $'Accept-Language: en-US,en;q=0.5' \ -H $'Accept-Encoding: gzip, deflate' \ -H $'DNT: 1' \ -H $'Connection: close' \ -H $'Upgrade-Insecure-Requests: 1' https://www.xxxxxxxxx.fr I am not sure of the above syntax (for instance, for user-agent, I saw: --user-agent/-A from man, or -H 'User-Agent:...' over internet, so maybe my syntax is wrong although no error in the output. chmod 755 curl.test and ./curl.test; here is what I get: HTTP/1.1 400 Bad Request Date: Wed, 05 Dec 2018 11:06:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Strict-Transport-Security: max-age=15768000 X-DataDome: protected Set-Cookie: datadome=1TRX6GOR3NLKMWu88uOEnSmniB0MayD7Js4s8AeT96Z; Max-Age=31536000; Domain=https://www.xxxxxxxxx.fr; Path=/ I would like to know why the request is bad. Thanx folks!

PortSwigger Agent | Last updated: Dec 06, 2018 09:58AM UTC