The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Determining number of requests/attacks made

Karthik | Last updated: Jul 10, 2015 01:07PM UTC

I am scanning two websites for XSS attacks (or any other test) only One is ASP.net and other is PHP. Lets say I am testing only URL parameter value and in both the cases there 5 parameters each Question 1: For both the websites, number of attack requests sent will be the same or the number of requests will differ ? (since they have same number of parameters) Question 2: If the number of requests are not the same, will the requests that have to be made against each, determined by Burp in the run time ?

PortSwigger Agent | Last updated: Jul 10, 2015 03:19PM UTC