Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Send request in the same connection turbo intruder

a | Last updated: Sep 27, 2022 10:52PM UTC

Hello I want enumeration the header of website vulnerable by client side desync But when try turbo intruder i receive each response as single connection req POST / HTTP/1.1 Host: example.com Connection: keep-alive Content-Type: application/x-www-form-urlencoded Content-Length: 0 GET / HTTP/1.1 X: x Turbo intruder script def queueRequests(target, wordlists): engine = RequestEngine(endpoint=target.endpoint, concurrentConnections=1, requestsPerConnection=2, pipeline=False ) seqReq = """GET /redirect HTTP/1.1 Host: example.com """ for word in range(1,5): engine.queue(target.req) time.sleep(1) engine.queue(seqReq) def handleResponse(req, interesting): table.add(req)

Hannah, PortSwigger Agent | Last updated: Sep 28, 2022 02:15PM UTC

Hi After your attack has completed, down by the large button that says "Halt", there should be a bit of information that tells you the number of connections made. If this isn't the number of Connections that you'd expect to see, you can try adjusting your "requestsPerConnection" number.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.