Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

Repeter changes http method

r00t | Last updated: Jun 18, 2024 09:20AM UTC

If a server advertises h2 in ALPN, the repeater tool changes protocol to this and refuses to change back. To repeat, create a new tab in repeater and paste the following content: -------- GET / HTTP/1.1 Host: login.microsoftonline.com -------- Click send, ok prefilled form, then send again. Http version is changed to HTTP/2. Click send again, which will generate the error "Server ALPN does not advertise HTTP/2 support." While the specific problem is likely due to poorly configured Microsoft servers, this behavior makes the repeater nearly unusable in this situation since is is not even possible to click back button to get back to the original 1.1 request.

r00t | Last updated: Jun 18, 2024 10:43AM UTC

Sorry, correct title would be "Repeater changes HTTP version"

Hannah, PortSwigger Agent | Last updated: Jun 18, 2024 11:02AM UTC

Hi If you pop open the "Request attributes" section in Inspector, you can select a specific HTTP protocol to use. If you'd like to prevent Burp from defaulting to HTTP/2 if the server says that it supports it, then you can change this option under "Settings > Network > HTTP > HTTP/2".

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.