Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Apache Based Login in Burp scanner

Mario | Last updated: Mar 28, 2021 01:13PM UTC

Hi Team, i must scan a website that have a Apache HTTP based login popup. So when i open the target site an apache popup (with login and password) is opened. I try to use 3 methods to configure it on burp scanner. 1) Normal login and password in application login but it NOT WORK. 2) With the chrome recorded extension but i see that it don't recognize the popup: On the clipboard: [ { "name": "Burp Suite Navigation Recorder", "version": "1.2.14", "eventType": "start" } ] 3) Inserting on the target site the string: https://<login>:<password>@target but not work same. Do you have any workaround for me? Thanks in advance. Mario

Hannah, PortSwigger Agent | Last updated: Mar 29, 2021 09:52AM UTC

Hi Mario

Have you tried using platform authentication?

You can find this under "User options > Connections > Platform authentication" - there's also the option available under Project Options if you don't want this authentication to be stored on a user level.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.