Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Content Discovery remove items from Queued Tasks

Wouter | Last updated: Mar 28, 2018 07:05PM UTC

Would be very nice if it is possible to remove items from the "Queued Tasks" in the content discovery to for example avoid unnecessary discovery tasks. Think this one is easy to implement ;)

PortSwigger Agent | Last updated: Mar 29, 2018 09:15AM UTC

Hi Wouter, Thanks for the suggestion. I agree, this would be a useful feature and could be implemented relatively easily. It is on the development plan, although unfortunately, the development team are busy with many other things at the moment. But next time we look at Content Discovery we'll do our best to incorporate this.

Burp User | Last updated: May 23, 2018 09:54AM UTC

Yes, it will be good feature. I`m have some troubles with it because i can`t remove some bad paths from Content Discovery scanning. For example, i put bad paths in scope exclude, but Content Distovery don`t see it. It take many time senselessly.

Liam, PortSwigger Agent | Last updated: May 23, 2018 10:03AM UTC

This is still logged in our development backlog. Unfortunately, we can't provide an ETA.

Burp User | Last updated: Jun 14, 2019 11:58AM UTC

Hi. Any update on this one?

Kopeć, | Last updated: May 14, 2020 07:44PM UTC

Hi, Yeah, it would be great to have this feature :) Is there any progress on this?

Liam, PortSwigger Agent | Last updated: May 15, 2020 09:16AM UTC

This is still logged in our development backlog. Unfortunately, we can't provide an ETA. I've added a note registering your interest in this feature.

Peter | Last updated: Jul 21, 2022 08:28PM UTC

Is there any update on this? Sometimes the lack of this feature makes the Content Discovery feature nearly unusable because there's 50 irrelevant tasks queued that are going to take days to finish before getting to the stuff that actually matters. For example, this is a small subset of the tasks that are currently queued in a content discovery session I have going right now: /assets//////images/ /assets/////images// /assets////images/// /assets///images//// /assets//images///// /assets/images////// /assets////////// /assets///////// /assets//////// /assets/////// /assets////// /assets///// /assets//// /assets/// /assets// /assets/ There's a lot more where that came from and that's with setting the recursion depth to 3, so what's with all the slashes? None of that is going to yield anything good and it would take forever to get to the rest of the application. I understand it's not a priority for the development team but from my perspective it's less of a feature request and more of a bug fix so that one can actually use the content discovery feature easily. It would also be nice to have an exclusion list for recursion as well, but that's another story...

Ben, PortSwigger Agent | Last updated: Jul 25, 2022 08:04AM UTC

Hi Peter, This is still, unfortunately, recorded in our development backlog. We can certainly add your interest to this generally and also pass on the feedback that you have provided to the team. We will also update this thread if we have any further news to share about it.

Antoine | Last updated: Sep 01, 2022 09:06AM UTC

Hi there, Interested in this feature too, removing queued task would be useful. Also, would it be possible to blacklist some words ? In my current test, there's a kind of WAF and the server returns a 302 (to another server) when some words are tested. In this case, the content discovery tool takes this 302 to a positive response, and adds it to the list of items to test. And it does it recursively, so it's never gonna finish the task. For example, the word "backup" returns a 302, and here's the list of queued tasks: /login/resources/backup/backup///// /login/resources/backup/backup////backup/ /login/resources/backup/backup///backup// /login/resources/backup/backup///backup/backup/ /login/resources/backup/backup//backup/// /login/resources/backup/backup//backup//backup/ /login/resources/backup/backup//backup/backup// /login/resources/backup/backup//backup/backup/backup/ /login/resources/backup/backup/backup//// /login/resources/backup/backup/backup///backup/ /login/resources/backup/backup/backup//backup/backup/ /login/resources/backup/backup/backup//backup// /login/resources/backup/backup/backup/backup/// /login/resources/backup/backup/backup/backup//backup/ /login/resources/backup/backup/backup/backup/backup// /login/resources/backup/backup/backup/backup/backup/backup/ Blacklisting the words, or being able to cancel these tasks would be great. Thanks in advance. A.

Ben, PortSwigger Agent | Last updated: Sep 01, 2022 11:07AM UTC

Hi Antoine, We can certainly include that detail in the existing feature request that we have recorded.

Mr | Last updated: Dec 06, 2023 02:19PM UTC

Hi, It's been 5 years already since this was first requested. Any ETA? Having this feature would have been really helpful on my last 10 audits.

Ben, PortSwigger Agent | Last updated: Dec 07, 2023 12:23PM UTC

Hi, We have been monitoring how popular this feature would be but it is still in our development backlog and is not currently in our plans, I am afraid.

David | Last updated: May 31, 2024 07:01AM UTC

Is this seriously not a feature still? Just add a --dont-scan like ferox or the ability to cancel queued items. The discover content tool is essentially useless because of the lack of control. We don't need 7 more UI updates before basic tooling controls.

Dominyque, PortSwigger Agent | Last updated: May 31, 2024 07:10AM UTC

Hi David, Unfortunately, this is still in our development backlog. I have added your feedback to the ticket and we shall pop any updates on this thread if and when there is any progress on this ticket. Thank you.

Max | Last updated: Jun 12, 2024 07:46PM UTC

I use Burp in my engagements on a daily basis. Whilst Content Discovery is generally a great feature, without the possibility of re-ordering, deleting or prioritizing tasks it's most often useless. It's unfortunate to see that there is a demand from your customers (we) and you even said in your first response that this feature is easy to implement. It's constantly requested all the time from various users and no great effort for implementation required. How is this still (in more than six years by now!) not a thing yet?

Michelle, PortSwigger Agent | Last updated: Jun 13, 2024 01:30PM UTC