Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Can Burp Pro crawl and download the site locally?

Rick | Last updated: Nov 03, 2022 07:50PM UTC

While I know how to use Burp Suite Pro to crawl and/or audit a site, is it possible to mirror and download the site locally so that you can search within the site pages for specific things you want to check to see if they are exposed? Thanks, Rick

Michelle, PortSwigger Agent | Last updated: Nov 04, 2022 09:05AM UTC

Burp won't mirror and download the site locally, but you do have various tools within Burp that can help you search for specific things within the requests and responses, for example: - Target -> Site Map aggregates information Burp has gathered about applications. The information can be filtered. https://portswigger.net/burp/documentation/desktop/tools/target/site-map - Burp -> Search https://portswigger.net/burp/documentation/desktop/functions/search I hope this helps. If there's something else you're trying to achieve then feel free to send over some more details and we'll see what else we can suggest.

Rick | Last updated: Nov 04, 2022 02:02PM UTC

Ok, here are more details. One of the things I am looking for it to detect pages where hidden form fields have been left in. Things like: <input type="hidden" name="postedBy" value="michelle" id="newPost_postedBy"> or perhaps where comments have been left behind: <!-- TODO Remove test credentials --> Can Burp's search find those? Thank you, Rick

Michelle, PortSwigger Agent | Last updated: Nov 07, 2022 09:36AM UTC