Burp Suite User Forum

Create new post

Different answers with and without burp proxy

Ruslan | Last updated: May 17, 2021 08:52PM UTC

Hi, I found crlf on website through firefox with burp. All works fine, but when I disable the proxy via burp, the attack does not work. Attack successfully runs without a proxy if http/2 is forcibly disabled in browser settings. Burp somehow changes the request?

Michelle, PortSwigger Agent | Last updated: May 18, 2021 08:04AM UTC

Can you email some screenshots of the steps you're taking and the responses you see so we can get a better understanding of what's happening, please? Which version of Burp are you using?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.