The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

In intruder, putting add positions properly to JSON type request

Takeshi | Last updated: Apr 04, 2015 03:23PM UTC

When I assess the JSON type request, intruder put the add position like below: testparameter=${"user":"admin","password": "password00"}$ I would like to put the target position like below: testparameter={"$user$":"$admin$","$password$": "$password00$"}

PortSwigger Agent | Last updated: Apr 08, 2015 08:12AM UTC

Thanks for this request. At present, Intruder is only aware of URL-encoded name/value pair parameters when it performs auto-placement of payload positions. We'll look into improving the support for other parameter/data types.

PortSwigger Agent | Last updated: Feb 18, 2016 05:24PM UTC