Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Minimise CPU throttling on server during a scan.

neil | Last updated: May 26, 2020 12:25PM UTC

Hello, Could you advise us on a least CPU intensive scan configuration for Burp Suite Pro crawl & audit? It would seem that whenever we run it, our Azure server's CPU goes straight up to a 100% usage. What settings can be tweaked without sacrificing too much speed and report depth?

Uthman, PortSwigger Agent | Last updated: May 26, 2020 01:34PM UTC

Hi, Have you tried setting up a resource pool and reducing the maximum number of concurrent requests? - https://portswigger.net/blog/burp-2-0-how-do-i-throttle-requests - https://portswigger.net/blog/improved-management-of-system-resources Can you provide more details on the number of cores the Azure machine has? Is anything else running on that machine? How many scans are being run concurrently?

neil | Last updated: Jun 01, 2020 10:45AM UTC

Hello, At 10 concurrent requests it estimates 5h at first, but 12hrs later is still not finished. We figured that at reduced concurrent requests it would potentially take much longer. The scan type - Crawl + audit. Audit configuration - Audit speed: Fast; Audit accuracy: Minimise false positives. Azure: Number of cores 4 and this is a production web + database server. Just one scan is ran at a time.

Uthman, PortSwigger Agent | Last updated: Jun 01, 2020 10:59AM UTC

Have you tried running Burp on a separate Azure VM? Or locally on your machine?

neil | Last updated: Jun 01, 2020 02:16PM UTC

I was running it from my machine, targeting our Azure VM.

Uthman, PortSwigger Agent | Last updated: Jun 01, 2020 02:42PM UTC

Are there any other CPU-intensive tasks running on your machine? How are you launching Burp?

neil | Last updated: Jun 01, 2020 03:36PM UTC

My machine is not even slightly affected by the scan, only Azure VM (target website). I am launching it as installed application from my machine v2020.4.1

Uthman, PortSwigger Agent | Last updated: Jun 02, 2020 07:58AM UTC