Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do I intercept and Add to Site Map requests PUT/UPDATE/HEAD/DELETE

Petr | Last updated: Oct 24, 2018 02:00PM UTC

Hello, I am just in the middle of Web Service Pentest - REST API. I received Swagger documentation and right now I am trying to spider all the endpoints and methods to Burp. Problem is, I am not able to intercept any other requests than GET or POST. These ones are sucessfuly added to the Site Map and I can work with them further. But I want to add PATCH/PUT/DELETE/HEAD requests to the Site Map as well. I was fiddling with Proxy Configuration, with Target > SiteMap > Filters as well, but I still cannot capture any of these requests. Can you guide me how to capture HEAD etc. requests? I have tried to click almost everything and quite sure I tried everything. Thanks.

PortSwigger Agent | Last updated: Oct 24, 2018 02:30PM UTC

Site Map is just a summary of the URLs discovered. Apart from POST methods it will only store one request per URL. This is a bit limiting for testing REST endpoints but unfortunately this design is quite embedded in the design of the Site Map. This is something we will work on in future. In the meantime, I recommend you use the Proxy History view instead of Site Map for REST endpoints.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.