Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

removeParameter API outputs incorrect request when removing the last Cookie

webpentest | Last updated: Jun 22, 2017 08:14PM UTC

There is an API to remove a parameter from a given request in IExtensionHelpers interface (https://portswigger.net/burp/extender/api/burp/IExtensionHelpers.html#removeParameter(byte[],%20burp.IParameter)). I use this API in a custom extension that performs request minimization (https://github.com/ngo/burp-request-minimizer/blob/master/minimizer.py). I often get a corner case when no cookies are actually required for the request, so my extension removes all of them. This results in a request with an empty Cookie: header, like the following: POST / HTTP/1.1 ... Cookie: param1=value1... The correct behavior would be to remove the empty header entirely.

PortSwigger Agent | Last updated: Jun 23, 2017 07:50AM UTC