Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

how to escape the dot character "." in Intruder

nameless77 | Last updated: Apr 12, 2021 01:25PM UTC

Is there anyway I can escape the dot character "." in Intruder? I'm doing an intruder attack with the email as parameter 1, which is "J12934@juice-sh.op", I need to escape the dot in the email address, so I entered "J12934@juice-sh\.op", but it showing up as J12934@juice-sh%5c%2eop under request and I get failed login attempt.

Hannah, PortSwigger Agent | Last updated: Apr 12, 2021 01:29PM UTC

Hi Have you tried unchecking the "URL-encode these characters" box under "Intruder > <chosen attack> > Payloads > Payload encoding"? Alternatively, you could just remove the "." from the list of characters to encode.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.