Comments (6)
It looks like your Burp Suite install is over a year out of date, so I'd suggest updating it and trying again.
from http-request-smuggler.
I have the same issue while working through there practice lab listed in the readme.md. My burp is update to the most recent as of today.
from http-request-smuggler.
@joshdesharnais1 if you can provide the following info, I'll be able to take a look:
- Which specific lab are you looking at?
- Screenshot of the vulnerability as reported by HTTP Request Smuggler
- Screenshot of the turbo intruder script
- Version number of Burp Suite, and HTTP Request Smuggler
from http-request-smuggler.
@albinowax I have also come across this recently. Interestingly, copying whatever script doesn't work with request smuggler, and pasting it into turbo intruder (with exactly the same request to run against) works great! It's just that the request smuggler window get's stuck at "Engine warming up..."
I tried this using version 2023.10.3.2-24372 (early adopter) and 2023.10.2.4 (Stable).
from http-request-smuggler.
@tstOutpost24 thanks, that's useful info.
I can see the problem now, working on a fix
from http-request-smuggler.
I've pushed a fix in release 2.16, thanks for reporting!
from http-request-smuggler.
Related Issues (20)
- The CL.TE attack payload is missing a newline character HOT 6
- Not working against burpsuite lab HOT 3
- Error running Smuggle Probe on Web-Security-Academy HOT 1
- how stop? how see details request and response? HOT 1
- "Convert to chunked" broken ? HOT 4
- Not detecting H2.CL HOT 1
- Turbo Intruder Attacks Queue But Never Launch HOT 7
- Smuggle probe does not run any tests HOT 6
- Click Http Request Smuggler Unable to load to Turb Inturder. Burpsuite 2022.2.2 HOT 3
- Smuggle Probe Fails To Detect the Vulnerability on Basic Web Academy Lab HOT 3
- The same problem as #50 closed issue. HOT 3
- Provide option to stop hostname resolution check HOT 1
- UI Issue HOT 2
- Turbo Intruder CLI java.lang.NullPointerException HOT 4
- Connection-state scan fails in community edition HOT 3
- Client-side desync issue detection seems to spit out false positives consistently. HOT 4
- Problems with x509 client auth HOT 1
- Null response CL.0 HOT 3
- Questions about "Gzip request body" HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from http-request-smuggler.