Feature Requests - Page 64 - Burp Suite User Forum

Every time the Burp is started, the previous Target - Scope and the Target Filter are reset.

save state wizard. (Exclude static content, Exclude by file extension)

Hi, result: huge state file. why? huge static web application with few dynamic pages New feature on the save state wizard: Exclude static content / export dynamic content only Exclude by file extension Thanks in...

Ability to Add to Scope from Proxy Intercept Tab

I do not believe this is possible today but I would like if there was an option "Add to scope" as one of the options under "Action" when intercepting packets. Thanks!

State Management - Display the current State

During an engagement I will work with and save multiple states. Once I load or save a state I would like Burp to display the current state loaded. I tt would make it easier to manage all the various files. It would also...

PHP extract() vulnerabilities

Please see this post about the risks of using PHP function extract() improperly: http://davidnoren.com/2013/07/03/php-extract-vulnerability/ At the end of the post are a few ideas on how to test for it. Unsure if those...

Remove duplicates

Scanner > Scan queue > sort by URL. Need a way to right-click and say "Remove Duplicates".

Automatically add repeater results to the site map

Hello, It would be nice if an option could be added to automatically add the repeater results to the site map. I work quite a lot with the repeater and it could be nice to have a direct access to search and other...

Ability to edit several rows on parameters viewing tab during editing of intercepted message

Ability to edit several rows (i.e. values/names of several POST parameters) on parameters viewing tab during editing of intercepted message (Proxy module) would helped a lot.

Brute Force

It would be nice if the burp pro spider had an option to "brute force" files and check for the most common 100 or so files in each directory. Will

ShellShock

Hi Support, I’m just curious if you’re going to release anything for ShellShock (recent bash vulnerability) detection. Please let me know about your plans. Thanks, David