Burp Suite User Forum

Create new post

Fuzzing request body

Shay | Last updated: Apr 01, 2016 05:57PM UTC

How do I send Intruder payloads that include multiple lines? Particularly I want to substitute request XML body.

PortSwigger Agent | Last updated: Apr 04, 2016 10:52AM UTC

You can position payload markers so that they span multiple lines, and the enclosed lines will be replaced with your payloads. Some payload types are not suitable for generating payloads containing line breaks. It really depends what you are trying to do with multi-line payloads. You could possibly Base64-encode your payloads and load them into the simple list payload type, and then create a payload processing rule to do a Base64 decode of the payload.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.