Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

dynamic cookie handling in burp intruder

Ariesto | Last updated: Oct 13, 2015 04:11AM UTC

How do i use the intruder if the webapp provide new cookie each time a new GET is made? Would it be possible for burp-intruder to pick the new cookie from the response and put it back as the next Request Sequence? Thanks. -A

PortSwigger Agent | Last updated: Oct 13, 2015 07:32AM UTC

Burp lets you define session handling rules to deal with most situations you run into with session handling. In this case, usually the most robust solution is to find a request or series of requests that can obtain a new token, and to execute that prior to each "attack" request. Details are here: https://portswigger.net/burp/help/options_sessions.html

Burp User | Last updated: Oct 14, 2015 11:30AM UTC