PortSwigger / http-request-smuggler

https://portswigger.net/blog/http-desync-attacks
Other
952 stars 101 forks source link

Engine warming up.. #63

Closed MochaCocoa closed 11 months ago

MochaCocoa commented 11 months ago

After I installed the Http-request-smuggler plug-in using burp suite,When I click on CL.TE attack,it keep reminding Engine warming up, After waiting for ten minutes, it still doesn't work. image image image

albinowax commented 11 months ago

It looks like your Burp Suite install is over a year out of date, so I'd suggest updating it and trying again.

joshdesharnais1 commented 11 months ago

I have the same issue while working through there practice lab listed in the readme.md. My burp is update to the most recent as of today.

albinowax commented 11 months ago

@joshdesharnais1 if you can provide the following info, I'll be able to take a look:

tstOutpost24 commented 11 months ago

@albinowax I have also come across this recently. Interestingly, copying whatever script doesn't work with request smuggler, and pasting it into turbo intruder (with exactly the same request to run against) works great! It's just that the request smuggler window get's stuck at "Engine warming up..."

I tried this using version 2023.10.3.2-24372 (early adopter) and 2023.10.2.4 (Stable).

albinowax commented 11 months ago

@tstOutpost24 thanks, that's useful info.

I can see the problem now, working on a fix

albinowax commented 11 months ago

I've pushed a fix in release 2.16, thanks for reporting!