Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Configure scan to ignore multiple similar pages based on query string value

Nick | Last updated: Jun 01, 2022 01:52PM UTC

Hello all! I want to scan/audit a web application with thousand of products How can I scan/audit -only- one page and not the similar pages that may contain a different query string value? For example, let’s say that we have a site example.com and the pages below : https://www.example.com/page1.php?color=red https://www.example.com/page1.php?color=blue https://www.example.com/page1.php?color=green https://www.example.com/page2.php?param=a https://www.example.com/page2.php?param=b https://www.example.com/page2.php?param=z What I need is just to scan one instance of https://www.example.com/page.php?color=red https://www.example.com/page2.php?param=a and ignore the rest https://www.example.com/page.php?color=blue https://www.example.com/page.php?color=green https://www.example.com/page2.php?param=b https://www.example.com/page2.php?param=z How can i setup this scan configuration? Thanks in advance for your answers!

Liam, PortSwigger Agent | Last updated: Jun 02, 2022 05:40AM UTC

Thanks for your message. Have you tried using Burp's scope controls? - https://portswigger.net/burp/documentation/desktop/tools/target/scope

Nick | Last updated: Jun 02, 2022 07:40AM UTC

Hello Thank you for your answer Yes, i am using scope control My problem is to avoid crawling/auditing the same page multiple times Lets say I have a url like: https://www.example.com/page.php?color=red&size=small&type=shirt The combination of color size and type may produce thousands of pages to audit Is there any way to tell burp to audit this page just one time and ignore the rest? eg audit https://www.example.com/page.php?color=red&size=small&type=shirt but ignore https://www.example.com/page.php?color=red&size=small&type=socks https://www.example.com/page.php?color=red&size=small&type=pants etc

Hannah, PortSwigger Agent | Last updated: Jun 06, 2022 01:15PM UTC

Hi The Scanner should perform this sort of deduplication automatically. If different options result in the same outcome then they may get consolidated. If changing the parameter values results in a significant difference between the resultant pages, then both will get scanned. Otherwise, they will get consolidated.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.