Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How exactly does the Burp Sequencer convert tokens to sets of bits for bit-level analysis?

Jeppe | Last updated: Dec 09, 2020 05:25PM UTC

Hi, The documentation for Burp Sequencer's randomness tests (https://portswigger.net/burp/documentation/desktop/tools/sequencer/tests) mentions that tokens are converted into sets of bits. I was wondering how exactly this is done? For the monobit test, the amount of ones and zeros is important. So, if for example "A" is converted to 41 (UTF-8), would the bit equivalent be 101001 or 00101001? It seems the former would lead to there being significantly more ones than zeros due to every character starting with a one, and the latter would lead to significantly more zeros than ones due to prepended zeros. Both would mean failing the test. I hope this question makes sense. Any help would be appreciated.

Liam, PortSwigger Agent | Last updated: Dec 10, 2020 02:23PM UTC