Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Configure scan to ignore multiple similar pages based on query string value

Nick | Last updated: Jun 01, 2022 01:52PM UTC

Hello all! I want to scan/audit a web application with thousand of products How can I scan/audit -only- one page and not the similar pages that may contain a different query string value? For example, let’s say that we have a site example.com and the pages below : https://www.example.com/page1.php?color=red https://www.example.com/page1.php?color=blue https://www.example.com/page1.php?color=green https://www.example.com/page2.php?param=a https://www.example.com/page2.php?param=b https://www.example.com/page2.php?param=z What I need is just to scan one instance of https://www.example.com/page.php?color=red https://www.example.com/page2.php?param=a and ignore the rest https://www.example.com/page.php?color=blue https://www.example.com/page.php?color=green https://www.example.com/page2.php?param=b https://www.example.com/page2.php?param=z How can i setup this scan configuration? Thanks in advance for your answers!

Liam, PortSwigger Agent | Last updated: Jun 02, 2022 05:40AM UTC

Thanks for your message. Have you tried using Burp's scope controls? - https://portswigger.net/burp/documentation/desktop/tools/target/scope

Nick | Last updated: Jun 02, 2022 07:40AM UTC

Hello Thank you for your answer Yes, i am using scope control My problem is to avoid crawling/auditing the same page multiple times Lets say I have a url like: https://www.example.com/page.php?color=red&size=small&type=shirt The combination of color size and type may produce thousands of pages to audit Is there any way to tell burp to audit this page just one time and ignore the rest? eg audit https://www.example.com/page.php?color=red&size=small&type=shirt but ignore https://www.example.com/page.php?color=red&size=small&type=socks https://www.example.com/page.php?color=red&size=small&type=pants etc

Hannah, PortSwigger Agent | Last updated: Jun 06, 2022 01:15PM UTC