The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Override final ActiveScan values to insert custom payload?

Danny | Last updated: May 08, 2017 03:44PM UTC

Is there a way to override ActiveScan checks or the order of checks so a custom check is run last? I'm trying to detect a certain type of XSS attack in our application where we're using Selenium to detect if javascript actually executes or not. I'm trying to find a way to keep my custom attack in all the fields long enough to run the selenium checks. Either by putting it at the end, turning off all default checks and just run mine, or possible "pausing" the active scan long enough to run an external script. Any ideas/suggestions appreciated. Danny

PortSwigger Agent | Last updated: May 09, 2017 08:23AM UTC