Handle params called '['

PortSwigger · Dec 17, 2020 · fbce03f · fbce03f
1 parent 386a03f
commit fbce03f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/burp/Keysmith.java b/src/burp/Keysmith.java
@@ -39,7 +39,6 @@ static ArrayList<String> getAllKeys(byte[] resp, HashMap<String, String> witness
         }
 
         if(Utilities.isResponse(resp)) {
-
             return getHtmlKeys(Utilities.getBody(resp));
         }
         else {
@@ -71,6 +70,10 @@ static String parseParam(String param) {
             parsed.append(e.replace("]", ""));
         }
 
+        if (parsed.length() == 0) {
+            return "";
+        }
+
         return parsed.toString().substring(1);
     }