Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp Intruder Missing Delimiter

Christian | Last updated: Dec 18, 2017 04:31PM UTC

Hi, I have seen an unexpected behaviour in Burp when using Intruder and fuzz points. Within the Intruder you can define fuzz points via the § character, however, you don't have to use two of them. If only one § is used, then everything between § and the end of the request is considered as insertion point. This would be fine and probably a good idea as this would save the lazy consultant to click twice if the whole request should be fuzzed. However, the last character gets deleted once this is used. Image: https://pbs.twimg.com/media/DRV6TDbW4AAqwD4.jpg

PortSwigger Agent | Last updated: Dec 19, 2017 08:48AM UTC

Hi Christian, Thanks for reporting this. In that case, we probably should warn the user rather than continuing. I think it's a pretty rare case though.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.