Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Website Requires Plug-in check

Andrew-N | Last updated: Feb 10, 2016 05:21PM UTC

Hello greetings. I am attempting to brute force a param. In order to test if the param supplied is valid the page first requires that the browser has a proprietary plug-in installed. The plugin is only supported in IE 11 and below. I have intercepted the request via proxy and sent to repeater where I replaced the user agent string to reflect that I am an IE 10 client. I do not however understand how to 'tell' the site that I do have the requested plugin installed. Any help would be appreciated. Thank you!

PortSwigger Agent | Last updated: Feb 11, 2016 09:43AM UTC

If the site has a way of detecting that you have the plugin installed (e.g. through the UA header or a custom header or something else), then there is presumably something within the normal requests to the site (made by your browser) that provide this information. So if you make the request that you want to brute force in the normal way using your browser via Burp Proxy, and send it to Repeater or Intruder, then it should be handled in the normal way by the target site.

Burp User | Last updated: Feb 12, 2016 03:53PM UTC

Thanks for the reply I'll give it a go. Best regards.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.