Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Query Parameter in SSL Request, where is this?

Albert | Last updated: Jul 06, 2015 05:29PM UTC

I am validating issues which were previously found. In the URL, the following information is available: GET /cleaned/servlet/ControllerServlet?commandLink=AppPriceReportList.jsp HTTP/1.1 Since the connection is via SSL, I would have expected that Burp would have flagged this as an issue. What happened?

PortSwigger Agent | Last updated: Jul 07, 2015 08:14AM UTC

Please can you describe exactly what the security vulnerability is that you believe is present in the application's behavior, and we'll be able to determine whether Burp should have reported it?

Burp User | Last updated: Jul 07, 2015 01:55PM UTC

The real issue at hand here is two fold. Here is the original Request: GET /cleaned/servlet/ControllerServlet?commandLink=AppBillingHistory.jsp HTTP/1.1 Given that the commandLink parameter is exposed, and is also a controlling factor in the application, it identifies different functions within the application, which may or may not be available to the authenticated user. The Title of this question is actually the vulnerability which was uncovered via AppScan. Thank you.

PortSwigger Agent | Last updated: Jul 07, 2015 02:50PM UTC