Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request dissapearing from repeater after modifying deserialized data #4

Open
newlog opened this issue Jun 12, 2014 · 1 comment
Open

Comments

@newlog
Copy link

newlog commented Jun 12, 2014

Hello,

I've been working with your extension for about two days. I've been uncapable to make it work right so I can modify serialized requests in the repeater.

The workflow is the following.

  1. First I open Burp loading the extension from the command line with the following command:
    $ java -Djava.lo.tmpdir=C:\Temp -classpath burpsuite_pro_v1.6.jar;extensions\JDSer-ng\BurpJDSer-ng.jar;extensions\JDSer-ng\xstream-1.4.4.jar;libs* burp.StartBurp

  2. I send a serialized request to repeater as the image shows.
    bad_burp_extension1

  3. I modify it.

  4. Then, clicking on "Go" does not work. And if I click on "Raw" the request disappears as can be seen in the following image.
    bad_burp_extension2

Sometimes I have achieved to correctly send the modified request. But most of the time this bug happens. The same happens when intercepting the request. In the case of intruder, the request is not deserialized (so I cannot freely modify it).

I tested this behaviour with Burp 1.6 and 1.5.21 (Pro versions). The same happens if I manually load the extension. I use Java 7 (jre7).

If you need any other information, ask me.

Thanks for your time,
newlog.

@newlog newlog changed the title Request dissapearing from repeater after modifying serialized data Request dissapearing from repeater after modifying deserialized data Jun 12, 2014
@newlog
Copy link
Author

newlog commented Jun 12, 2014

I forgot to say that if I send the request before modifying the deserialized data, everything goes fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant