Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Two-step Intruder attacks

Erik | Last updated: Sep 07, 2023 10:43PM UTC

I'm testing a site where a PUT is altering a record, but the site only returns 202 Accepted. In order to find out if each payload ends up intact, altered, or causes an error, a separate request has to be made to the corresponding GET endpoint. It would be helpful if there was a way to add a "validate" request that follows after, and have columns for the output length of those requests. Maybe even search for the payload in the 2nd response and alert if it's intact, altered, or missing.

Michelle, PortSwigger Agent | Last updated: Sep 08, 2023 08:22AM UTC