Modifying requests using the Inspector - Port Swigger
Summary: PortSwigger's documentation describes how Burp Suite's Inspector lets users add, remove, reorder, and edit request items such as HTTP headers, and re-applies the same sequence of encodings to edited data before injecting it into the request. It also notes that newlines can be injected from the detailed view, which the text says is essential for exploiting a number of HTTP/2-exclusive vulnerabilities discovered by James Kettle.
Why it matters: The same tooling that makes header and encoding edits convenient also makes newline injection into HTTP/2 requests a routine step, and the text ties that capability directly to vulnerabilities James Kettle found in the protocol itself.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026