Burp Suite User Forum

Login to post

Enterprise edition, scan not replaying text field data

Sajjad | Last updated: Sep 11, 2023 06:34PM UTC

We are evaluating Enterprise edition, one question I had is I tried launching scan but what I see is its just scanning URLs that are discovered through crawling, and not trying to scan the text fields with replayed data. Do I have to manually interact with with Application to capture the request and then the BURP will replay them cause the scan in enterprise ask for creds but does not do anything other then scanning the crawl URLs. (an even those URLs are not completely discovered)

Alex, PortSwigger Agent | Last updated: Sep 12, 2023 06:43AM UTC

Hi Sajjad, Thanks for your post. If you are able to submit the following information to support@portswigger.net, we can review everything and advise further: - Scan event log and scan debug log; these can be accessed via the "Logging" tab when viewing the scan - Screenshot of your site settings; navigate to the site and select the "Details" tab Once we review the logs and site settings, we can suggest the next steps to improve coverage. Best regards,

You need to Log in to post a reply. Or register here, for free.