Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Macro Cookie Handling - Project File

Kevin | Last updated: Dec 01, 2017 03:29PM UTC

Hello, When in the macro editor and going to 'Configure Item', you can change the cookie handling behaviour of the macro. I have noticed that when un-ticking 'Add cookies received in responses to the session handling cookie jar' that the change does not get persisted in the project option .json file. I cannot see any new entry in the project options json file and after saving, if I reload BURP Suite, that checkbox is checked again, so nothing actually gets saved for this. Kevin.

PortSwigger Agent | Last updated: Dec 04, 2017 01:34PM UTC

Hi Kevin, Thanks for reporting this. It appears to be a bug in the configuration saving code. I've added this to the development plan. It may be a few months until we can address this. Is this stopping you working? I can't think of a simple workaround, but potentially at extension could rewrite the relevant response to strip Set-Cookie headers. Please let us know if you need any further assistance.

Burp User | Last updated: Dec 05, 2017 08:59PM UTC

Hi Paul, It's not stopping me from working. At the moment I am manually un-setting it when I launch BURP. If it's an issue with the configuration saving code, it is possible for me to add the information into my project options json file manually? I have a set of project files I use and don't re-save them, so it should persist this way. Kevin.

PortSwigger Agent | Last updated: Dec 08, 2017 10:00AM UTC

Hi Kevin, Unfortunately the problem affects the load code too, so manually editing the JSON won't help. We'll let you know when we make progress on a fix.

Burp User | Last updated: Mar 05, 2018 08:23AM UTC

Hey, Is there any progress on a fix for this? The bug is slightly more annoying that I originally thought, because if I forget to change this manually, it ruins the whole scan (as the login macros don't work correctly). Thanks, Kevin.

PortSwigger Agent | Last updated: Mar 05, 2018 08:29AM UTC

Hi Kevin, Thanks for following up. This had been sat on a pending work queue. I've now applied the fix to the master tree, so this will be in the next Burp release.

Burp User | Last updated: Mar 08, 2018 03:11PM UTC

Hi Paul, Thanks for letting me know! I look forward to the next release. Kevin.

PortSwigger Agent | Last updated: Mar 08, 2018 03:16PM UTC