Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Advanced Target Scope - Load File

Frank | Last updated: Jan 19, 2021 08:47PM UTC

Hey all, I normally used regex in advanced scope to make sure I capture all sub domains. However, I have a list of over 100 I'd like to check. I created a TXT file of the domains with regex but when I go to Load the file nothing happens. No error, not results. Any ideas? Thanks in advance. Frank

Uthman, PortSwigger Agent | Last updated: Jan 20, 2021 09:58AM UTC

Hi Frank, You need to load the URLs without any regex in them. Can you give this a try? E.g. https://www.google.com https://portswigger-labs.net https://example.com

Frank | Last updated: Jan 20, 2021 12:26PM UTC

That does work for me. However, I was hoping to make things a bit easier for myself. My understanding is if I want to add all subdomains in scope I would need to call them all out in the scope or use regex to capture them.

Uthman, PortSwigger Agent | Last updated: Jan 20, 2021 01:49PM UTC

Thanks for that information. This sounds like it could be a feature request for the 'Load' option to respect any regex set within the file being uploaded. If possible, can you send the file or an example to us on support@portswigger.net?

Frank | Last updated: Jan 20, 2021 02:12PM UTC

Will do! Thanks for the help.

Graves, | Last updated: May 05, 2021 07:41PM UTC

What is the status of the feature of adding lists of URIs with regex?

Graves, | Last updated: May 05, 2021 11:30PM UTC

basically what would be nice is if there is a flat file with the following entries: ----------- example.com *.example.com/* test.net/path/here/* www.test.net/* ----------- Would make the following scopes for both http and https: ----------- example\.com .*\.example\.com\/* test\.net\/path\/here\/* www\.test\.net\/* -----------

Uthman, PortSwigger Agent | Last updated: May 06, 2021 07:32AM UTC

Thanks for your feedback! Unfortunately, we cannot provide an ETA on this request at the moment but we will update this thread when it has been implemented.

Graves, | Last updated: Oct 04, 2021 02:54PM UTC

Hi! Has there been any movement on this feature request?

Uthman, PortSwigger Agent | Last updated: Oct 04, 2021 04:34PM UTC

Hi Neil, You should see this very soon! I cannot provide a specific date but our developers have completed the work for it.

Liam, PortSwigger Agent | Last updated: Nov 02, 2021 10:23AM UTC

You can now load files into the target scope with URLs containing regex. - https://portswigger.net/burp/releases#professional

Graves, | Last updated: Mar 30, 2022 01:08AM UTC

Hi! Pasting a full URIs with regex doesn't behave the way I want it to. For example, say I want to put the second-level and all subdomains with a specific path in scope: https://*.example.com/full/path the regex would likely look like this: https:\/\/(.*\.|)example\.com:443\/full\/path\/ However, this doesn't work. If I add the following manually, it does work: protocol: Any Host or IP range: (.*\.|)example\.com Path: \/full\/path\/ Can this be fixed?

Graves, | Last updated: Mar 30, 2022 01:09AM UTC

Sorry, I meant loading a file with full URIs... not pasting doesn't seem to work.

Uthman, PortSwigger Agent | Last updated: Mar 30, 2022 09:51AM UTC

Hi Neil,

Your regex is invalid. I would suggest testing it with a site like https://regex101.com/.

Correctly escaped, your example should look like this:
https\:\/\/.*\.example\.com\/full\/path

Can you give that a try and let me know if you have any issues?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.