search

PortSwigger / http-request-smuggler

https://portswigger.net/blog/http-desync-attacks
Other
952 stars 101 forks source link

can not find "Smuggle attack" button in right-click menu on request #31

Closed chenhb-zte closed 4 years ago

chenhb-zte commented 4 years ago

Burp suite version is V2.1.03

Fristly i clicked ‘Launch sumllge probe’, and waited for the probe completed， but i can not find 'Smuggle attack' button in menu on request.

mcgyver5 commented 4 years ago

I had the same experience and found that Smuggle Attack options only show up if you are using a request that already has both headers in it (you can paste them in): Transfer-Encoding: chunked Content-Length: 25 (or whatever number...)