Research Academy Daily Swig
My account Customers Account and subscription management About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

How do I tell content-discovery to give up on a certain directory tree

Tim | Last updated: Jan 24, 2023 06:19PM UTC

This is a common problem with automated spidering tools: It gets stuck (for days in some cases) in a directory structure like /blog/2023/01/post1 and /blog/2023/01/post2 etc. and it does a good job discovering that /blog/2022 also exists but I don't need it to exhaust itself on this directory. There are hundreds of queued tasks looking for items in the blog directory and I don't see a way to delete those. I tried taking /blog/ out of scope but it still enumerates content there. Thanks!

Hannah, PortSwigger Agent | Last updated: Jan 25, 2023 10:19AM UTC

Hi There isn't really a way to do this from the Content Discovery engine. However, if you go to "Settings > Search > Out-of-scope request handling", you can tell Burp to drop all out-of-scope requests. You could do this while running the Content Discovery tool to prevent it from making requests to items that are out of scope.

You need to Log in to post a reply. Or register here, for free.