Burp Suite User Forum

Login to post

Important functional bug in unmaintained extension "Request Minimizer"

Nicolas | Last updated: Jan 07, 2021 06:12PM UTC

Hello, I noticed that extension "Request Minimizer" will not act on POST parameters, because of a faulty IF condition. I reported the bug to the author, but I doubt it will be patched anytime soon (the last update was 3 years ago): https://github.com/ngo/burp-request-minimizer/issues/7 The fix is super easy (replace "and" by "," on line 77), and I hope Portswigger will patch its fork (the one used for the BAppStore). Thanks in advance!

Nicolas | Last updated: Jan 07, 2021 06:58PM UTC

Workaround (after installation from the BAppStore): sed -i 's/IParameter.PARAM_BODY and/IParameter.PARAM_BODY,/' ~/.BurpSuite/bapps/cc16f37549ff416b990d4312490f5fd1/minimizer.py

Nicolas | Last updated: Jan 08, 2021 03:42PM UTC

The bug was promptly fixed by the maintainer. Pull request at https://github.com/ngo/burp-request-minimizer/pull/8

Hannah, PortSwigger Agent | Last updated: Jan 08, 2021 05:23PM UTC

Thank you for reporting this. I'm glad the maintainer implemented your fix quickly. I've asked him to get in contact with us via email so we can get the update process started.

You need to Log in to post a reply. Or register here, for free.