The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How make any expression in session handling rule

Kirill | Last updated: Aug 05, 2020 05:49AM UTC

Hi I need, that rules with "check session is valid" trigger for many headers, ex for: Redirect-Location: %2Fdk%3Fst.cmd%3DanonymMain%26st.redirect%3D%252F Set-Cookie: JSESSIONID= Set-Cookie: AUTHCODE= I tried using ||, but nothing works, can u help me and say, how I will configure a rule so that it works on any of these 3 headers?

Uthman, PortSwigger Agent | Last updated: Aug 05, 2020 08:45AM UTC

Have you tried comma-separated values? Where are you entering this? Under 'Look for expression'?

Kirill | Last updated: Aug 05, 2020 06:56PM UTC

Hi, find solve of my problem I entered ((Redirect-Location: %2Fdk%3Fst.cmd%3DanonymMain%26st.redirect%3D%252F|Set-Cookie: JSESSIONID=)|Set-Cookie: JSESSIONID) and this is work

Uthman, PortSwigger Agent | Last updated: Aug 06, 2020 08:29AM UTC