Burp - Match and Replace

arvind doraiswamy <[email protected]>
Newsgroups gmane.comp.security.web-applications
Message-ID <[email protected]>
Hi All,
We are using Burp 1.3 to intercept traffic. While using the Match and
Replace feature, we're trying to replace all parameters which have a
blank value with some payload. So for eg. A POST with parameters in
the POST body as a=&b=2&c= should result in a=xyz&b=2&c=xyz if we give
xyz as the replacement string. This works perfectly if we replace in
the Response Body in Burp .. however in case it is a GET request and
we try and replace the same in the Request Header it replaces only the
first instance. So for eg. In a GET request it becomes a=xyz&b=2&c= .
Notice that the value of c remains blank.

Has anyone else faced similar problems? Is there a workaround for this?

Thanks
Arvind



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.