Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

In intruder, putting add positions properly to JSON type request

Takeshi | Last updated: Apr 04, 2015 03:23PM UTC

When I assess the JSON type request, intruder put the add position like below: testparameter=${"user":"admin","password": "password00"}$ I would like to put the target position like below: testparameter={"$user$":"$admin$","$password$": "$password00$"}

PortSwigger Agent | Last updated: Apr 08, 2015 08:12AM UTC

Thanks for this request. At present, Intruder is only aware of URL-encoded name/value pair parameters when it performs auto-placement of payload positions. We'll look into improving the support for other parameter/data types.

PortSwigger Agent | Last updated: Feb 18, 2016 05:24PM UTC

This is supported in recent versions of Burp.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.