The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Web shell upload via race condition Lab

Shahid | Last updated: May 20, 2022 01:54PM UTC

I have followed this lab instructions/solutions on a number of occasions, however every time i run the attack, all I get is 404 status and not 200. Is there a bug? Don't understand what I'm doing wrong here?

Ben, PortSwigger Agent | Last updated: May 23, 2022 08:28AM UTC

Hi Shahid, I have just run through this particular lab and was able to solve it using the solution provided so the lab does appear to be working as expected. Are you able to provide us with some specific details of the steps that you are carrying out to configure your Turbo Intruder attack so that we can assist you further with this? If it is easier to include screenshots then please feel free to send us an email to support@portswigger.net and include these there.

Shahid | Last updated: May 30, 2022 12:39PM UTC

Hello, I have mailed in my screenshots and script I was using. Thank you Shahid

Michelle, PortSwigger Agent | Last updated: May 30, 2022 12:57PM UTC