Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

Python Code Injection Vulnerability Validation

Keith | Last updated: Mar 09, 2016 02:53PM UTC

I used Burp Suite Pro to scan a site. It identified Python Code Injection on a page. The scanner added a cookie to sleep. I used Burp Proxy to add cookie and got the same result. When I used other proxy tools: Web Scarab; tamper etc. the cookie had no affect on the site. Could the python code be putting Burp to sleep? How do I test?

PortSwigger Agent | Last updated: Mar 10, 2016 11:21AM UTC

Burp does not execute Python or any other code that appears within requests. We would suggest chaining another proxy tool upstream from Burp (e.g. another instance of Burp) so that you can monitor the timing of requests made by each instance. This should validate that the delay is happening at the server end.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.