Now click on “ action” → “Send to repeater” (or CTRL+r) and then “drop”.

For example you have clicked on a “submit” button on the target site and the request has been submitted and intercepted. Another reason why you would like to you use “drop” is when you want to see how a request is made but not necessarily send it to the web server.

Probably you will see an error in your browser showing that the request was not submitted. This will not send the request to the destination. If intercept is on and you don’t really want to send the request forward, click “ drop”. It is good to have “intercept is on” only when you know that you want to intercept a specific request to change it on-the-fly. The requests will be stored in “Proxy” → “HTTP history” for later user, even if you don’t have “intercept is on”.

Burp will send them to the right destination only if you stop intercepting or if you press the “ forward” button which will forward the request to the web server. This will grab all the requests sent from the browser through Burp’s proxy. That’s because Burp hasn’t sent the request yet.Ĭlick “ Intercept is on” to turn off interception. What you will see in the browser is a page which keeps on waiting for a response. If you open a page in the browser with “intercept is on”, Burp will display the request sent from your browser and until you press “forward” or “intercept is on”, it won’t submit the request to the web application’s server and receive a response. These can be modified on-the-fly or can be viewed together with their responses in the 'HTTP history' tab.Ĭlick “Proxy” → “Intercept” → “Intercept On” to stop intercepting requests. The proxy is used to intercept requests from your browser.

Burp suite pro scanner tutorial