Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Low labs performance

Vadim | Last updated: Dec 07, 2020 08:33AM UTC

I'm getting slow responses (up to 20 seconds delay) when working at least with CSRF labs (haven't tried other labs yet), examples are: Dec 07 11:20:18 MSK 2020 GET https://ac2d1f3b1f30876c80592482005e0040.web-security-academy.net/login 13454ms Dec 07 11:19:57 MSK 2020 GET https://ac2d1f3b1f30876c80592482005e0040.web-security-academy.net/ 16033ms Dec 07 11:23:44 MSK 2020 GET https://ac711f031f6087e280f92454011c00a0.web-security-academy.net/exploit 16083ms Dec 07 11:19:39 MSK 2020 GET https://ac2d1f3b1f30876c80592482005e0040.web-security-academy.net/logout 17411ms Dec 07 11:23:24 MSK 2020 POST https://ac711f031f6087e280f92454011c00a0.web-security-academy.net/ 19940ms

Hannah, PortSwigger Agent | Last updated: Dec 07, 2020 04:49PM UTC

Hi Did you experience this delay when accessing any of the other labs? Do you have any extensions loaded on your Burp installation?

Vadim | Last updated: Dec 07, 2020 05:32PM UTC

1) CSRF labs were all slow, Information disclosure ones were fast. But I've tried CSRF ones several hours earlier than the DISC ones. 2) Burp was not used. I'm using OWASP ZAP.

Hannah, PortSwigger Agent | Last updated: Dec 08, 2020 01:16PM UTC

Were you proxying the labs through ZAP at the time, or were you seeing the slow response times when connecting normally?

Vadim | Last updated: Dec 08, 2020 04:42PM UTC

I was proxying labs.

Hannah, PortSwigger Agent | Last updated: Dec 09, 2020 10:29AM UTC

Thank you for that information. We're currently investigating this issue.

Vadim | Last updated: Dec 14, 2020 09:53AM UTC

Hello, today I found another occurrence but on XSS labs. https://acb41fc11e9899618004324c00af0094.web-security-academy.net/?search=%27 took 18 sec. This was https://portswigger.net/web-security/cross-site-scripting/contexts/lab-html-context-with-most-tags-and-attributes-blocked So it is not limited on the CSRF labs only. Time of occurrence was Mon Dec 14 12:50:31 MSK 2020.

Hannah, PortSwigger Agent | Last updated: Dec 14, 2020 04:24PM UTC

Hi Thank you for that information. We're still investigating the issues with slow labs.

JS | Last updated: Feb 10, 2023 01:09PM UTC

Having similar issues, "Blind SSRF with out-of-band detection" is painfully slow, taking ages to load. Each page takes +20 seconds to load.

Hannah, PortSwigger Agent | Last updated: Feb 13, 2023 09:42AM UTC

Hi. Are you still experiencing the issue with slow labs?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.