Burp Suite User Forum

Create new post

HTTP Parameter Pollution

Colin | Last updated: May 13, 2015 06:36PM UTC

Are there plans to implement HTTP Parameter Pollution tests? More info: https://www.owasp.org/index.php/Testing_for_HTTP_Parameter_pollution_%28OTG-INPVAL-004%29

PortSwigger Agent | Last updated: May 14, 2015 07:58AM UTC

Yes, this is in our roadmap of new scan checks to add over the coming year.

Burp User | Last updated: Dec 02, 2015 11:11AM UTC

Has this been implemented yet?

PortSwigger Agent | Last updated: Dec 02, 2015 02:09PM UTC

Not as yet, sorry. Still in the backlog.

PortSwigger Agent | Last updated: Feb 19, 2016 10:00AM UTC

This check has not yet been added. We have the story in our near-term roadmap and hope to have this added within the coming months.

Burp User | Last updated: Feb 24, 2017 03:09PM UTC

Has this been implemented yet?

Burp User | Last updated: Oct 03, 2017 12:33PM UTC

When can we expect this?

PortSwigger Agent | Last updated: Oct 03, 2017 12:42PM UTC

Amish, unfortunately we can't commit to a firm timeline. There are lots of suggestions for new scanner tests and we generally work on what we think will give the most benefit - which can be a moving target.

Burp User | Last updated: Dec 14, 2017 03:14PM UTC

Hi, Any updates on this? Eagerly waiting for its inlcusion

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.