Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Upload Scanner Extension - Wrong filename variable on upload

Mopam | Last updated: Mar 31, 2022 09:56AM UTC

The 'Upload Scanner' portswigger extension seem to only and exclusively replace the "Filename" variable on the upload POST request, but in my case the variable that contains the actual filename is different than the variable that contains the name of the uploaded file. Reading through the documentation the only way to specify the static URL on which to fetch the uploaded image is by using the ${FILENAME} variable, but this one exclusively fetches the "Filename" var, if for example the variable I need to fetch is called "filenameblabla" and I modify the varible as "${FILENAMEBLABLA}" it doesn't work at all. After all these awesome features implemented, it's not even possible to specify the variable in the POST request that needs to be iterated/changed for the file name uploaded? It "blindly" only works if the filename variable is called "filename" really ???? PICTURE THAT DEPICS THE PROBLEM: https://postimg.cc/23wN1H60 Please, let me know, have a nice day.

Hannah, PortSwigger Agent | Last updated: Mar 31, 2022 10:32AM UTC

Hi Extensions are written and maintained by third-party users of Burp. You can raise this with the original author on their GitHub repository here: https://github.com/modzero/mod0BurpUploadScanner/issues

Mopam | Last updated: Apr 07, 2022 09:31AM UTC