The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

why there is an empty line after Content-Length header in http smuggle attacks?

[ | Last updated: Mar 21, 2022 06:09PM UTC

for example : POST /search HTTP/1.1 Host: normal-website.com Content-Type: application/x-www-form-urlencoded Content-Length: 11 q=smuggling So the length of 'q=smugglingis' is 11. why there is an empty line after 'Content-Length: 11'?

[ | Last updated: Mar 21, 2022 06:13PM UTC