Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Requests in Macro to host differing to host in target request not sending

Andrew | Last updated: Feb 22, 2022 07:05AM UTC

Hi, This is an issue I've started encountering on newer versions of BurpSuite (checked on 2022.2 and 2022.1). When sending a request with a macro, if the requests in the macro are to a different target host than the target request then those requests will not send. Here is an example - as you can see from my macro, requests are meant to be sent to "https://portswigger.net" and "https://example.com" before being sent to our target request. https://ibb.co/KWp2vfZ I have set up a Session Handling Rule to run this macro before a request. This is set in scope for all URLs as can be seen from the images below. https://ibb.co/tpcNfg4 https://ibb.co/cgCYTRF Next I clear my Burp logs in the Logger tab and go into the repeater and send a request to "https://portswigger.net/test" https://ibb.co/nBtLp4Z https://ibb.co/9V0kMF2 I send the request and go into the Logger tab again. As you can see only the request to "https://portswigger.net/" from the Macro and our target request "https://portswigger.net/test" ran. The request in the macro to "https://example.com" did not run. https://ibb.co/6yczVJV I also noticed another quirk - if the first request in the Macro is to a different target host than our target request, then the Macro request will run successfully and be left in the Logger tab, but our target request will hang and fail. For example if like below I set the Macro to only go to "https://example.com" https://ibb.co/xGqTCby And again send a request to "https://portswigger.net/test" in the Repeater https://ibb.co/cg80nps Then this time the Logger will indeed show our request to "https://example.com" but our request to "https://portswigger.net/test" will not be shown and instead hang in the Repeater https://ibb.co/G2dt8XN https://ibb.co/7n90Vq4 Hopefully this isn't a big mistake on my part but I have tested with two different BurpSuite pro versions (2022.2 and 2022.1) on two different computers with two different licenses and got the same issue. I am wondering if perhaps this has anything to do with the newly added functionality which allows fuzzing of the target host in the intruder. Any help you could give would be much appreciated

Hannah, PortSwigger Agent | Last updated: Feb 22, 2022 03:19PM UTC