PortSwigger / BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition
https://portswigger.net/burp/documentation/scanner/bchecks
GNU Lesser General Public License v3.0
619 stars 109 forks source link

`differs from` not strict #136

Closed 0xspade closed 11 months ago

0xspade commented 11 months ago

I have a bcheck script which has a following line:

if {base.response.body} differs from {latest.response.body} then

supposedly, it should only report if there's changes in response body. However, what's happening was there's still a report if there's a change in response headers.

Hannah-PortSwigger commented 11 months ago

Hi.

The {X} differs from {Y} conditional compares full responses. Even if you provide it with a fragment of a response, like body, the diffing will still be done on the full response.

Instead of using this, you should use not({X} is {Y}).

We've raised a feature request to adjust the validation to make this distinction clearer.

0xspade commented 11 months ago

This is helpful. I'll try this one.