Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cluster bomb attack

Fabio | Last updated: Apr 27, 2023 09:30AM UTC

Hi, I am new to Burp and I am testing the cluster bomb attack. When using the intercept to send an authentication request with username and password to an IAM solution, I get a response with code 200. I send this request to intruder and create the payload for username/password and start the attack. However, I always get response with code 302, and attack is not successful, even when it tries the correct username and password. Can you please share details on why this happens, and how to make it so that I always get response code 200 in the attack? Thank you

Hannah, PortSwigger Agent | Last updated: Apr 28, 2023 09:31AM UTC