Reissuing requests with Burp Repeater - Port Swigger
Summary: PortSwigger's tutorial walks through using Burp Repeater to resend a GET /product request with a productId parameter repeatedly, changing the value each time to compare server responses. Sending a non-integer productId caused an exception and a verbose error response with a stack trace that named the Apache Struts framework and its version, 2.3.31.
What you should know: A single malformed parameter value was enough to expose the framework and exact version in a stack trace - the kind of detail an attacker uses to match the site against known vulnerabilities for that release.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026