Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Match / Replace (Intruder Processing Rule) defect

Schulz, | Last updated: Nov 12, 2019 11:49AM UTC

Hi Burp-Team, I have noticed a bug in the Match / Replace Intruder processing rule. I wanted to replace the character " with \". I have tried multiple variants to achieve that but always ended up with a different result than the one I wanted to have. As far as I understand, the "replace" part should take the input as given, correct? However, filling in \" results in the " character only. Best regards, Pascal

Michelle, PortSwigger Agent | Last updated: Nov 12, 2019 02:02PM UTC

During your testing, have you tried \\" for the "replace" part of the Intruder processing rule? The payload processing rule would then read like this: Match ["] replace with [\\"] Using a regex checker (there are various ones online, e.g. https://regex101.com) this looks like it will give you the result you're wanting, if not, please let us know.

Burp User | Last updated: Nov 14, 2019 02:00PM UTC

Yeah I have tried that, was not working.

Liam, PortSwigger Agent | Last updated: Nov 14, 2019 03:42PM UTC