The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Discover hidden files and directories

olek | Last updated: May 06, 2021 01:25PM UTC

Hi Team I would like ask about how to discover hide directories and files in Burp.I try use some wordlist but this not works for my .Any hide folder can not be find. But If I use some pay commercial online scanner.I see hide directories can be find. Please about advice how to use Burp for it.

Ben, PortSwigger Agent | Last updated: May 07, 2021 08:43AM UTC

Hi, Can you confirm how you are currently trying to find hidden directories and files using Burp? Using the Content Discovery tool within Burp should allow you to find directories and files that are not linked from elsewhere in the site by configuring Burp to use a wordlist that you wish to search against (in the same manner as other content discovery tools that are available). There are more details on this particular tool on the page below: https://portswigger.net/burp/documentation/desktop/functions/content-discovery

olek | Last updated: May 07, 2021 01:04PM UTC

I send page to intruder for example GET /§ §HTTP/2 and load some worldlist .And looking for 200 respond. May be is wrong scan or my words list wrong . What do you think.?? When I use pentest-tools.com I can see hide folders .

Ben, PortSwigger Agent | Last updated: May 10, 2021 07:38AM UTC