Burp Suite User Forum

Create new post

gzip in request

manuel | Last updated: Jun 17, 2016 07:20AM UTC

Im assessting a mobile application that sends HTTP requests compressed. I have activated the check "proxy>options>miscelaneous>unpack gzip/deflate requests". But, when the request is unpacked, the request has still the header 'application/x-gzip', so the server does not accept the request because the content is not compressed. As a workarround I have set a replace rule of 'application/x-gzip' for 'text/html'. Another possible solution would be compressing again the request before sending it. Thanks, Manuel

PortSwigger Agent | Last updated: Jun 17, 2016 08:02AM UTC

Burp ought to re-write relevant headers when it has unpacked compressed body content. Please can you let us have the full headers that you see with the unpack option turned off, and also the full headers that you see with the option turned on? Thanks.

Hannah, PortSwigger Agent | Last updated: Sep 01, 2020 09:53AM UTC

Hi Vinay Could you tell us the version of Burp you are seeing this behavior on?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.