Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Form Submission

Karthik | Last updated: Apr 15, 2015 08:12AM UTC

I am spidering a website and opted for manual form submission. Question 1: In the submit form dialog, I can see hidden fields also expecting an input from us (there is no default value as well). In a typical browser based FORM post, these hidden values will be automatically passed with appropriate values. so, in this case, what values should be given as we arent aware of the values ? Question 2: During a manual form submission, if values for one or two parameters like Text Box, Select Box, Hidden fields are missed ( user fails to type the input) what will happen ? Will Burp Suite skip performing tests against those parameters ? Please confirm.

PortSwigger Agent | Last updated: Apr 15, 2015 08:28AM UTC

1. If the form submission dialog shows empty values for hidden fields, this is because the form itself had empty values for those fields. Normally, the browser will submit those fields with empty values, so you can leave those empty if you are just wanting to crawl the app. If there is some client-side code in the page that dynamically populates the hidden values, then you may need to manually assign those values in the dialog. 2. If some form field values are left empty in the form submission dialog, then Burp will submit empty values for those fields.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.