Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Exclude from crawl scope using query string (burp 2.0.13)

Wouter | Last updated: Dec 07, 2018 11:04AM UTC

Hi, How can I, for example, exclude the following URL from the crawl scope: https://example.com/main.php?logOut=true Thanks in advance

Liam, PortSwigger Agent | Last updated: Dec 10, 2018 11:12AM UTC

Wouter, you should enter the URL in to the Target > Scope > Exclude from scope function. If you've tried this and it's not working, could you describe the behavior you are encountering.

Burp User | Last updated: Dec 10, 2018 11:56AM UTC

Liam, the query string is NOT added to the excluded scope. The target scope does show the excluded URL, but the query string is not present.

Liam, PortSwigger Agent | Last updated: Dec 10, 2018 01:48PM UTC

Thanks for clarifying. We'll bring this up as a potential feature request.

Liam, PortSwigger Agent | Last updated: Dec 10, 2018 02:47PM UTC

Just to follow up, we've added a note to our dev backlog to explore adding this functionality. Unfortunately, we can't provide an ETA.

Liam, PortSwigger Agent | Last updated: Apr 08, 2019 01:37PM UTC

Hi Wouter. We haven't made any progress with this feature, it is still in our backlog. Have you found Burp 2's crawler is better at managing this use case? It should be reestablishing a session when it is logged out.

Burp User | Last updated: Jul 29, 2019 07:48PM UTC

Hi Liam, any updates about this feature?

PMwxVLDHhy6oiP | Last updated: Aug 11, 2021 08:27AM UTC

Has this been implemented yet? I need to block requests of this form: ``` https://website.com/index.php?action=lockAccount ``` Reestablishing the session does not work, due the account being locked out.

Ben, PortSwigger Agent | Last updated: Aug 11, 2021 02:05PM UTC