Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Multiple host and multiple payloads for brute forcing

Sijn | Last updated: Dec 17, 2019 09:28AM UTC

I want to test multiple web pages at once with multiple payloads (username and password field). I tried different ways, also with Turbo Intruder but cannot find a way to combine those. Only one at the time has been succeeded. Someone who can help me out or has experience with this problem?

Ben, PortSwigger Agent | Last updated: Dec 17, 2019 02:42PM UTC

Hi, Can you not create multiple Burp Intruder tabs and run your brute force attacks that way? Each tab would be configured to test a separate webpage and have its own payload, is that what you are trying to achieve?

أنس | Last updated: Dec 27, 2020 02:49PM UTC

I was also looking for this, is there any way to brute-force the host as well? The scenario is like I have a list of 100 subdomains, and I want to retrieve all of their robots.txt files. Is there a way to do this in the current version, if so, how? if not, by any way will it be available in the future?

Liam, PortSwigger Agent | Last updated: Dec 29, 2020 10:46AM UTC