The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cookies set to a blank value

Kevin | Last updated: Mar 08, 2018 03:16PM UTC

This issue occurs when running the scanner tool (I haven't tested on other tools), and if you have the setting to update the cookie jar from responses for the tool. If one of your responses contains an empty cookie (e.g. ASP.NET_SessionId=) then the cookie in the cookie jar is updated to be empty. I understand the site probably shouldn't be returning an empty cookie on response here, but it would be good if there was some logic that treated an empty cookie the same as if the cookie just wasn't returned (i.e. don't update the cookie jar). Thanks, Kevin.

PortSwigger Agent | Last updated: Mar 08, 2018 04:04PM UTC