PortSwigger / http-request-smuggler

https://portswigger.net/blog/http-desync-attacks
Other
952 stars 101 forks source link

install fail due to "Failed to verify BApp file" #30

Closed xuxiaoyuspallow closed 4 years ago

xuxiaoyuspallow commented 4 years ago

Either from Bapp store or from mannul, it would always fail because the error image. When install from mannul, it would poll up an alert window ,as below: image

albinowax commented 4 years ago

Interesting. We can't replicate this problem at our end - maybe your network is corrupting the file somehow? Could you:

xuxiaoyuspallow commented 4 years ago

I didn't download any bapp file. I compile it from source code. reproduce:

  1. download source code: https://github.com/PortSwigger/http-request-smuggler/archive/master.zip
  2. upzip to `http-request-smuggler. Then cd to the directory. run: gradle fatJar
  3. would get http-request-smuggler\build\libs\http-request-smuggler-all.jar
  4. the md5 of the above file is: d72599d952c19c06b550e9b2bbfa3c08
xuxiaoyuspallow commented 4 years ago

And all other extensions' installation is good

albinowax commented 4 years ago

If you build a jar from source, you need to load it via Extender->Extensions->Add (not via Extender-BApp Store->Manual install)

albinowax commented 4 years ago

To be fair this is pretty unclear from the UI so I've raised a ticket internally.

xuxiaoyuspallow commented 4 years ago

If you build a jar from source, you need to load it via Extender->Extensions->Add (not via Extender-BApp Store->Manual install)

ok, I fixed in this way