PortSwigger / http-request-smuggler

https://portswigger.net/blog/http-desync-attacks
Other
952 stars 101 forks source link

Connection-state scan fails in community edition #57

Closed justblock6 closed 1 year ago

justblock6 commented 1 year ago

Whenever I try to use the "Connection-state" testing, I receive this error right away

Error in thread: Cannot invoke "burp.IBurpCollaboratorClientContext.generatePayload(boolean)" because "burp.BasicCollab.collab" is null

Is Burp Pro/Collab needed for this scan?

albinowax commented 1 year ago

Ah sorry it uses three techniques and one of them assumes you have pro and breaks the whole check. I'll get that fixed ASAP

albinowax commented 1 year ago

I've just pushed a fix for this, so if you build from source it should work now. The change should be released into the bapp store within a few days. Thanks for the report!

justblock6 commented 1 year ago

Thanks for such a quick fix! Greatly appreciated!