Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Send request in the same connection turbo intruder

a | Last updated: Sep 27, 2022 10:52PM UTC

Hello I want enumeration the header of website vulnerable by client side desync But when try turbo intruder i receive each response as single connection req POST / HTTP/1.1 Host: example.com Connection: keep-alive Content-Type: application/x-www-form-urlencoded Content-Length: 0 GET / HTTP/1.1 X: x Turbo intruder script def queueRequests(target, wordlists): engine = RequestEngine(endpoint=target.endpoint, concurrentConnections=1, requestsPerConnection=2, pipeline=False ) seqReq = """GET /redirect HTTP/1.1 Host: example.com """ for word in range(1,5): engine.queue(target.req) time.sleep(1) engine.queue(seqReq) def handleResponse(req, interesting): table.add(req)

Hannah, PortSwigger Agent | Last updated: Sep 28, 2022 02:15PM UTC