Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Intercept a POST request, but a parameter is missing in HTTP response

Sanniddha | Last updated: Apr 09, 2021 08:06PM UTC

I was intercepted a request from Protonmail (https://protonmail.com). But in the HTTP response password parameter is missing. I forget the password of my protonmail account and I have add recovery email in my protonmail account, so how can't change the password by using "forget password". So, I tried to use Burp Suit for brute forcing the password (I have not forget my password totally, it is a long password and I forgot the sequence of characters) by use "Brute Forcer" payload. But problem is that when I intercepted the log in request, there was username parameter, but password parameter is missing, so how can brute force the password ?

Uthman, PortSwigger Agent | Last updated: Apr 12, 2021 08:29AM UTC

Hi Sanniddha, Unfortunately, this does not look like an issue with the product so we will not be able to assist you. Do you have permission to perform this type of attack? Have you checked out the Burp Intruder? - https://portswigger.net/burp/documentation/desktop/tools/intruder

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.