Tutorial #3: How to add a custom static header into the HTTP Request in Burp Suite

Ba Yin Min
Jan 27, 2024

--

Sometimes, you may need to add some application specific extra header to the HTTP request during an application pentesting.

For this example, I want to add some random static header Some-Extra-Header: SomeValue that will be auto appended to every request that flows through the proxy.

This is an initial request calling to an application hosted locally

The Burp Suite interface keeps changing with some newer versions. You can follow the following steps currently:

  • Click Proxy > Proxy Settings > Search Match and Replace > Click Add
  • Choose Request Header for Type
  • Put desire static value in the Replace field
Put a desired static header in the Replace field
The extra header) is now added to every request (at line #17). You may have to choose Auto -modified Request from the request dropdown list to view

This was a quick and dirty way.

--

--

Ba Yin Min
Ba Yin Min

Written by Ba Yin Min

Pentester. Application & Cyber Security enthusiast. Insatiable learner.

No responses yet