Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Random timing for intruder

Max | Last updated: Sep 28, 2017 11:20AM UTC

Ability to set intruder to send requests at random times in a given range, for example a random time between 1 and 120 seconds for as many requests as you want.

Liam, PortSwigger Agent | Last updated: Sep 28, 2017 11:26AM UTC

Have you tried using a variable throttle? You can configure this at Intruder > Options > Request Engine > Throttle > Variable.

Burp User | Last updated: Sep 28, 2017 03:51PM UTC

Yes but that is not random, it steps by the value you enter.

Liam, PortSwigger Agent | Last updated: Sep 28, 2017 03:51PM UTC

You're correct Max. To achieve the randomised intruder attack you described, you would need to create or edit a Burp extension. You could edit the Distributed Damage extension: - https://portswigger.net/bappstore/bapps/details/543ab7a08d954390bd1a5f4253d3763b - http://blog.portswigger.net/2017/08/adapting-burp-extensions-for-tailored.html Additionally, I've added this to our development backlog. Unfortunately, we can't provide an ETA.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.