Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Advanced Target Scope - Load File

Frank | Last updated: Jan 19, 2021 08:47PM UTC

Hey all, I normally used regex in advanced scope to make sure I capture all sub domains. However, I have a list of over 100 I'd like to check. I created a TXT file of the domains with regex but when I go to Load the file nothing happens. No error, not results. Any ideas? Thanks in advance. Frank

Uthman, PortSwigger Agent | Last updated: Jan 20, 2021 09:58AM UTC

Hi Frank, You need to load the URLs without any regex in them. Can you give this a try? E.g. https://www.google.com https://portswigger-labs.net https://example.com

Frank | Last updated: Jan 20, 2021 12:26PM UTC

That does work for me. However, I was hoping to make things a bit easier for myself. My understanding is if I want to add all subdomains in scope I would need to call them all out in the scope or use regex to capture them.

Uthman, PortSwigger Agent | Last updated: Jan 20, 2021 01:49PM UTC

Thanks for that information. This sounds like it could be a feature request for the 'Load' option to respect any regex set within the file being uploaded. If possible, can you send the file or an example to us on support@portswigger.net?

Frank | Last updated: Jan 20, 2021 02:12PM UTC

Will do! Thanks for the help.

Graves, | Last updated: May 05, 2021 07:41PM UTC

What is the status of the feature of adding lists of URIs with regex?

Graves, | Last updated: May 05, 2021 11:30PM UTC

basically what would be nice is if there is a flat file with the following entries: ----------- example.com *.example.com/* test.net/path/here/* www.test.net/* ----------- Would make the following scopes for both http and https: ----------- example\.com .*\.example\.com\/* test\.net\/path\/here\/* www\.test\.net\/* -----------

Uthman, PortSwigger Agent | Last updated: May 06, 2021 07:32AM UTC

Thanks for your feedback! Unfortunately, we cannot provide an ETA on this request at the moment but we will update this thread when it has been implemented.

Graves, | Last updated: Oct 04, 2021 02:54PM UTC

Hi! Has there been any movement on this feature request?

Uthman, PortSwigger Agent | Last updated: Oct 04, 2021 04:34PM UTC

Hi Neil, You should see this very soon! I cannot provide a specific date but our developers have completed the work for it.

Liam, PortSwigger Agent | Last updated: Nov 02, 2021 10:23AM UTC

You can now load files into the target scope with URLs containing regex. - https://portswigger.net/burp/releases#professional

Graves, | Last updated: Mar 30, 2022 01:08AM UTC

Hi! Pasting a full URIs with regex doesn't behave the way I want it to. For example, say I want to put the second-level and all subdomains with a specific path in scope: https://*.example.com/full/path the regex would likely look like this: https:\/\/(.*\.|)example\.com:443\/full\/path\/ However, this doesn't work. If I add the following manually, it does work: protocol: Any Host or IP range: (.*\.|)example\.com Path: \/full\/path\/ Can this be fixed?

Graves, | Last updated: Mar 30, 2022 01:09AM UTC

Sorry, I meant loading a file with full URIs... not pasting doesn't seem to work.

Uthman, PortSwigger Agent | Last updated: Mar 30, 2022 09:51AM UTC