Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Logout after correct password

ottavia | Last updated: Sep 02, 2018 08:52AM UTC

- burp intruder - i would like to know if it's possible to make an account logout every time the intruder find a correct password. I have an account and password list, and every time one of the account password is correct looks like that stop checking the others because the account is already logged in. thanks

PortSwigger Agent | Last updated: Sep 03, 2018 08:27AM UTC

You could do this using a post-request macro. If you're not familiar with macros and session handling rules, there's an introduction here: - https://support.portswigger.net/customer/en/portal/articles/2363088-configuring-burp-s-session-handling-rules If your case, first record a macro that does logout. Then create a session handling rule, scoped to the login URL, with the action "Run a post-request macro". This will cause a logout after each login attempt, which is a little inefficient, but probably suitable for your needs.

Burp User | Last updated: Sep 03, 2018 09:32AM UTC