Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Hash responses/request

Manuel | Last updated: Sep 23, 2015 09:21PM UTC

Hello, Sometimes I need to compare responeses (or requests). Any minor change is interesting. Maybe 95% of the answers are the same (thousands of requests), sometimes length doesn't vary. Hashing will make detecting changes faster. Also, hashing (or similar method) can be useful for detecting changes in some parts. For example, I use Intruder, 99% of the page is the same, anyhow my payload appear (in error, reference or something), so I can't use length to find useful requests. Hashing, or marking what is to be ignored of changed, etc. can be of GREAT help. Also, some more advanced/easy integration with anti-CSRF in intruder may be helpful. Another nice feature may be like "error detection" in intruder and pause the attack. Some of those errors give a code 200, but with the body you can notice. Cheers!

PortSwigger Agent | Last updated: Sep 24, 2015 08:27AM UTC