Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

I need to add two identical headers.

Nzoth | Last updated: Aug 14, 2024 12:29AM UTC

... X-Forwarded-For: 1.1.1.1 X-Forwarded-For: ... In this form, i need to add two identical headers, but the session processing rules will only apply to one put the same header. I've looked for extensions, but there doesn't seem to be a way to force this. Is there a way?

Michelle, PortSwigger Agent | Last updated: Aug 14, 2024 12:31PM UTC

Can you tell us more about your use case and the session handling rule you have configured? Would the 'Add custom header' extension available in the BApp Store help? This can be run from a session handling rule and can add specific headers, so if you want this header to be added as a new header even if it already exists in the original request, this might help: https://portswigger.net/bappstore/807907f5380c4cb38748ef4fc1d8cdbc

Nzoth | Last updated: Aug 14, 2024 02:46PM UTC

Use case: https://book.hacktricks.xyz/pentesting-web/rate-limit-bypass (Manipulating IP Origin via Headers part) I need to send a request with two duplicate headers. If use ‘Add Custom Header’ to configure one X-Forward-For header and one empty X-Forward-For header from the Session Handling feature, only the last X-Forward-For header you set will be applied. Is there any way to use the same header multiple times in a buff suite (other than arbitrarily creating it in Repeater)?

Michelle, PortSwigger Agent | Last updated: Aug 15, 2024 12:34PM UTC

Hi Can you email support@portswigger.net and send me screenshots or a screen-recording of the steps you took when using the 'Add custom header' extension from the BApp Store? I had some success adding a second header with the same name using the extension and session handling rules but maybe I was doing something slightly different, so it would be good to compare the steps.

Nzoth | Last updated: Aug 16, 2024 09:01AM UTC

https://forum.portswigger.net/thread/i-need-to-add-two-identical-headers-4519dc98?CategoryId=feature-requests

Nzoth | Last updated: Aug 16, 2024 09:01AM UTC

Please check your email. Thank you.

Michelle, PortSwigger Agent | Last updated: Aug 16, 2024 11:02AM UTC