Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

What url encoding does Burp Decoder use?

Stan | Last updated: Jul 24, 2023 02:50PM UTC

Hello, I was playing with the Burp Decoder function using URL encode. I noticed Burp encodes quite a number of symbols compared to nodejs/Javascript's encodeURI() and encodeURIComponent() methods. For example, Burp returns %2A for an asterisk whereas nodejs/Javascript's encodeURIComponent() and encodeURI() both return the asterisk symbol. Here is my nodejs code --- main.js - start --- 'use strict'; const main = () => { const symbols = ['~', '!' ,'@' ,'#' ,'$', '%', '^', '&', '*', '(', ')', '_', '+', '`', '-', '=', '{', '}', '|', '[', ']', '\\', ':', '"', ';', '\'', '<', '>', '?', ',', '.', '/', ' ']; console.log('Symbols:\tenncodeURI\tencodeURIComponent:'); symbols.forEach(e => { console.log(`${e}\t\t ${encodeURI(e)}\t\t ${encodeURIComponent(e)}`) }); } main(); ---- end ---- May I know what is the algorithm behind Burp Decoder's URL encode?

Michelle, PortSwigger Agent | Last updated: Jul 25, 2023 09:25AM UTC