Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Reflected input monitor for passive scanning

Aditya | Last updated: May 15, 2015 06:41AM UTC

A new check should be introduced to passive scanner which will monitor all the requests and report if any of the input parameters get reflected in the response. This will be very useful in determining which parameters to focus on.

PortSwigger Agent | Last updated: May 15, 2015 08:20AM UTC

We are planning something similar to this, but it will be a passive check that relies on prior active scanning. Purely passive identification of correlations between input and output in a single request/response pair is just too unreliable, as most apps are full of parameters with short values that will also happen to appear in responses. We are planning to enhance Burp's stored XSS detection by adding a passive check that reports the reappearance of any data that was previously submitted by Burp when probing for data reflections. This will report reflection/storage of data submitted in-band (via normal request parameters) and out-of-band (in responses from the Collaborator server when an external service interaction has occurred). So having done an active scan of all the application's entry points, you can then browse around and Burp will passively report any observed stored data. Based on this, you can target further manual testing or active scanning of the entry/exit points.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.