The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Different results posted by Burp Suite Pro versus Enterprise

Cyril | Last updated: May 14, 2020 12:48PM UTC

Hi, I ran web tests using a Burp Suite Pro license (temp). As I ran similar tests on the same target using the same settings on a Burp Suite Enterprise tool (which my company bought), I discover I have slightly different results than that of Pro. Why is this so? Particularly, Pro is able to return a XPath vulnerability labeled as High severity and Firm but went undetected by the Enterprise tool. The settings I use include 1. Crawl strategy - most complete 2. Audit coverage - thorough 3. Never stop audit due to application errors 4. Never stop crawl due to application errors 5. Minimize false positives I ran the tests several times and they are very consistent. I am puzzled as to which I should believe.

Michelle, PortSwigger Agent | Last updated: May 14, 2020 02:27PM UTC