The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Intruder - Use another char (or string) for payload substitution (§)

Jeanderson | Last updated: May 09, 2023 01:49PM UTC

Is there any way to change the § character in intruder? My requests are failing in intruder because it strips all of the occurrences of the § character from the original requests. Disabling this behavior (automatic strip §) would be enough too, when you don't need payload substituion. Probably related: https://forum.portswigger.net/thread/some-content-characters-change-when-request-is-sent-to-intruder-1af54c39 Thank you.

Hannah, PortSwigger Agent | Last updated: May 11, 2023 09:35AM UTC

Hi Could you tell me the version of Burp that you are currently using? Could you also explain how you are sending your request to Intruder? Are you pasting it in, or sending it from another tool?

Jeanderson | Last updated: May 11, 2023 01:01PM UTC

Burp version is 2023.3.5. I use the burp to proxy the original request, then search the POST request in the HTTP history, right click it and then click "send to intruder". If I click "send to repeater", the request arrives on the repeater OK and this problem doesn't happen. If a copy and paste the request from history to intruder, then the burp app freezes. I think this happens because of the request size: almost 2MB.

Hannah, PortSwigger Agent | Last updated: May 11, 2023 03:48PM UTC