Cyber Risks · PortSwigger Research

Burp Suite message editor - Port Swigger

Summary: PortSwigger's documentation describes the Burp Suite message editor, which displays HTTP and WebSocket messages across the suite and lets users edit and resend them in tools such as Burp Repeater and Burp Intruder. The editor offers Pretty, Raw, Hex, and Render tabs by default, with additional tabs for GraphQL queries and Inspector widgets, and it presents HTTP/2 messages using HTTP/1 syntax while converting edits to HTTP/2 behind the scenes.

Why it matters: The editor's HTTP/1-style view of HTTP/2 traffic is bound by HTTP/1 syntax and requires normalization, so PortSwigger states it may not be suitable for testing protocol-level issues exclusive to HTTP/2 and recommends the Inspector instead.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related