yeswehack / PwnFox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
983 stars 89 forks source link

Content-Length gets updated even it is disabled #14

Open ls4cfk opened 1 year ago

ls4cfk commented 1 year ago

Hi,

I come across a weird issue in the BurpSuite when the PwnFox extension is loaded, The Update Content-Length feature stops working. After disabling the feature, Content-Length stills gets updated when the requests are sent via the repeater. This can be checked via the logger tab.

I've spoken to PortSwigger Support, they tested the PwnFox and made the suggestion to switch using IProxyListener instead of IHttpListener.

Based on the tests they have done with PwnFox and BurpSuite, the behavior was fixed after switching to IProxyListener.

Hope this helps.

B-i-t-K commented 1 year ago

Are you sure you are using the last version ?

This has been patch by https://github.com/yeswehack/PwnFox/pull/8

ls4cfk commented 1 year ago

Hi, That should fix the issue but the latest release does not really contain the fix?

image

B-i-t-K commented 1 year ago

Oh yeah my bad, I've merged the pr but forgot to update the releases. I doing some update on the firefox part also, it should available this week.

Thanks!

D3vil0p3r commented 1 year ago

Hello @B-i-t-K Is this issue fixed?

Thanks