The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Simulate WAF

Bajii0 | Last updated: Oct 23, 2023 08:43AM UTC

Hello, I have an idea, and even if I know it's not the point of Burp Suite, I wanted to know if it's seems doable for you: I have a WAF that is blocking requests, I would like to simulate it in Burp Suite, Like something in Burp that I could give the WAF's rules and Burp Suite would be able to tell me if this request is going to be blocked or not by the WAF, while Burp being still offline. Is it possible ?(I prefer that rather than re-create a WAF on my local architecture with same rule because It would be easier for me to test) If not possible, is there a way to have already made request's template and when clicking a button, send it to the waf to see if it's still blocked after updating rules. It's the only other way to check rules while using burp imo, if you have any other idea, just put it in the comments. Thanks in advance for your responses :)

Michelle, PortSwigger Agent | Last updated: Oct 23, 2023 11:01AM UTC