The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Match and Replace (User-Agent) Not Working v2023.1.2

Gigostack | Last updated: Apr 24, 2023 03:00AM UTC

I'm trying to spoof my user-agent to access the website snapchat.com, i've set the match and replace rule as follows: Type: Request Header Match: ^User-Agent.*$ Replace: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 Regex Match: Checked https://imgur.com/a/Z1rlgPY Here is a picture of the logger showing the subsequent request and response (after match and replace rule has been added and enabled), and how the user-agent header is unmodified: https://imgur.com/a/7Yu6pyD The installation, otherwise, is stock (except for several TLS pass through entries which have always worked correctly), I followed a tek on your site for spoofing IP, just modifying it for my needs, so I'm not sure if there's more I need to do still, or what. (https://portswigger.net/burp/documentation/desktop/tutorials/using-match-and-replace) Please let me know. Thanks.

Ben, PortSwigger Agent | Last updated: Apr 24, 2023 10:01AM UTC

Hi, I have just been testing the match and replace rules with the specific version of Burp that you are using and I am not seeing the same behaviour as you - the rule that I setup appears to work as expected. Just to rule out something simple, in your screenshot showing the Logger tool the order that you have selected to display the requests means that you have the earlier requests at the top of the screen and the latest requests at the bottom - was the match and replace rule set up when all of these requests were generated or was it set up part way through and would not have been applied to some of the earlier requests?

Gigostack | Last updated: Apr 24, 2023 11:48PM UTC