Burp Suite User Forum

Login to post

Javascript dependent Login Page unable to use Automated Scan Feature

Dev | Last updated: Feb 19, 2020 09:34AM UTC

Hey! If the login page only works with JavaScript enabled. Then the automated scan feature is not working. It says login page not found. As discussed in this post also. https://forum.portswigger.net/thread/login-on-website-scan-6bfca371ba8e88 Please provide some feature or tell some other way so that applications using javascript works fine. Thank You!

Hannah, PortSwigger Agent | Last updated: Feb 19, 2020 11:21AM UTC

Hi Have you tried enabling our experimental crawler? You can find this under "New scan configuration > Crawling > Miscellaneous > Use embedded browser for navigation (EXPERIMENTAL)". This should provide better coverage for JavaScript-heavy applications, and is continually undergoing improvements. As part of our roadmap for 2020 (https://portswigger.net/blog/burp-suite-roadmap-for-2020), we eventually intend for this to be made default. An alternative is to manually crawl a website to build up your sitemap, and audit that (live task).

Hannah, PortSwigger Agent | Last updated: Nov 20, 2020 08:39AM UTC

Hi Since v2020.8.1 of Burp Suite Professional, browser-powered scanning has been enabled by default. - https://portswigger.net/burp/releases/professional-community-2020-8-1

You need to Log in to post a reply. Or register here, for free.