search

PortSwigger / http-request-smuggler

https://portswigger.net/blog/http-desync-attacks
Other
952 stars 101 forks source link

Smuggle probe running even though task execution paused #35

Closed infosecconsultant closed 4 years ago

infosecconsultant commented 4 years ago

Hi,

I’ve ‘globally’ paused task extensions as well as all the blow audits/crawls as shown below. However, using the extension logger++ the smuggle probe extension is clearly generating new traffic regardless at the same rate as before.

Logger++ reports the source of the traffic as ‘extender’.

All tasks paused image

Pause happened at request 26. Note that it continues (and will persist) image

Unloading the extension stops the smuggle probe task, but it can not be resumed and instead must start again.

The config I used was as shown below, however, it does not appear to matter which options are used: image

If there is some way to pause the execution of the smuggle probe that would be possible to resume, that would be most welcome.

In a similar vein, being able to see that the smuggle probe is running, and specifically, what host it is running against would be a most welcome additional feature.

Thanks,

albinowax commented 4 years ago

Unfortunately this is a core Burp issue affecting all extensions, and isn't something I can fix. It should be resolved in core Burp eventually.

You could potentially implement a pause button for all extensions in Distribute Damage. Personally it doesn't fit into my use case so it's not a priority unfortunately.