Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Montoya sendToIntruder requires insertion points to be in size order

Tyler | Last updated: Oct 17, 2023 09:17AM UTC

Hi, When creating custom insertion points, if they are not in size order the API throws an IllegalArgumentException: Invalid custom payload positions. To replicate this: Create a list of Ranges and add the following (for example) insertions.add(Range.range(716, 717)); insertions.add(Range.range(729, 731)); Send the insertion points to intruder. Observe no error. Flip the order of adding these to the ArrayList and observe the error thrown to console. This becomes a bit of an issue when you are using ParsedHttpParameter and the valueOffsets as I don't do them in order. Thanks, Tyler

Tyler | Last updated: Oct 17, 2023 09:38AM UTC

I've added the following which fixes my range list. Might it be worth adding this to the HttpTemplate code to be more intuitive? Collections.sort(insertions, Comparator.comparingInt(Range ::startIndexInclusive));

Hannah, PortSwigger Agent | Last updated: Oct 17, 2023 03:24PM UTC