Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Web cache poisoning through ambiguous request lab

Sarunas | Last updated: Apr 24, 2023 10:29AM UTC

Hello, I've found that someone else had the same problem with this lab a while back. As soon as I introduce a second Host header I get an error - 504 Gateway Timeout. I've looked at the video solution to see if I am doing something I wasn't supposed to but turns out it should've worked. I am adding the request I'm sending below: GET / HTTP/2 Host: 0a940085036932b1805ba80e005f001f.web-security-academy.net Host: example.com Cookie: _lab=[..snipped..] Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Sec-Ch-Ua: "Not:A-Brand";v="99", "Chromium";v="112" Sec-Ch-Ua-Mobile: ?0 Sec-Ch-Ua-Platform: "Windows" Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Thank you, and hope back to hear from you soon !

Ben, PortSwigger Agent | Last updated: Apr 24, 2023 01:09PM UTC

Hi Sarunas, If you disable the use of HTTP/2 for your Repeater requests by expanding the Request attributes -> Protocol section of Inspector and then switching the Protocol value to HTTP/1, does this then allow you to solve the lab?

Sarunas | Last updated: Apr 24, 2023 01:23PM UTC