Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Scan of ReactJS application gets stuck

Gabriel | Last updated: Dec 04, 2020 08:56AM UTC

Hi, I have the following setup: - a flask API - a ReactJS frontend - a docker compose that starts my flask, react and an nginx container - I can access my app on localhost:3000 I would like to scan this app, but the scanning gets stuck at some point during audit. Moreover, if I cancel the scan and start it again, it does about 3 requests in the crawling phase and then it gets stuck. How can I debug this and get more info about it?

Liam, PortSwigger Agent | Last updated: Dec 04, 2020 01:49PM UTC

Hi Gabriel. Have you tried installing Logger++? - https://portswigger.net/bappstore/470b7057b86f41c396a97903377f3d81 You can use this tool to identify the requests that are causing Burp to stall. Do you see any correlation with the requests that are causing this issue?

Gabriel | Last updated: Dec 07, 2020 07:48AM UTC

Hi, In event log I can see "Maximum time exceeded in dynamic code analysis of: /" Logger++ shows me all the requests. For a lot of them I have status 500 and for 4 of them I have -1 (timed out).

Liam, PortSwigger Agent | Last updated: Dec 07, 2020 03:39PM UTC

Could you try turning off dynamic JavaScirpt analysis - https://portswigger.net/burp/documentation/desktop/scanning/audit-options. Let us know if this helps.

Gabriel | Last updated: Dec 10, 2020 11:56AM UTC

It seems like turning off the "Make requests for missing JavaScript dependencies" does some magic and my scan doesn't stuck anymore. Any idea why is that?

Liam, PortSwigger Agent | Last updated: Dec 10, 2020 03:41PM UTC

Could we ask which version of Burp you are using? We fixed an issue with timeout checks in a recent release.

Gabriel | Last updated: Dec 11, 2020 07:12AM UTC

I am using Burp Pro v2020.11.3

Liam, PortSwigger Agent | Last updated: Dec 11, 2020 08:02AM UTC

Thanks for confirming, Gabriel. Is it possible that the original issue occurred on Burp Pro v2020.11.2?

Gabriel | Last updated: Dec 14, 2020 06:49AM UTC

No, the only version that I was using to test this was v2020.11.3.

Liam, PortSwigger Agent | Last updated: Dec 14, 2020 09:43AM UTC