Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Scanner Stops Scanning

Richard | Last updated: May 28, 2020 01:47AM UTC

Scanner stops scanning when a request is made which times out. Watching the requests in Logger++, the comment field contains 'Timed out', but the 'completed' checkbox is not ticked. The scanner pauses. Pausing the scan from the dashboard, then quitting and restarting Burp and pressing play starts the scanner again.

Liam, PortSwigger Agent | Last updated: May 28, 2020 07:27AM UTC

Thanks for this report, Richard. Could you provide us with your diagnostics (Help > Diagnostics)? Does this occur for all applications? Would it be possible to provide a screenshot of your Dashboard > Event log? You can send any information to support@portswigger.net.

Isaak | Last updated: Nov 06, 2020 10:57AM UTC

Hello Same problem here. Here is an example of request that times out: GET / HTTP/1.1 Host: fk3imwvcwc5or2kfozzuts88hznsbja729qzdp1e.burpcollaborator.net Pragma: no-cache Cache-Control: no-cache, no-transform Connection: close The request times out because the server does not answer to invalid host header (he just drops the connection). It should be noted that I disabled HTTP Headers insertion point types, but that's a different and minor issue even if it would give me a workaround for this bug. Here is the behavior I can observe when a scan is staled because of this bug: - The Audit items panels shows three items in status "Scanning" (still running Active phase 1), but I see no new requests since at least one hour. - Also in the Audit item panel, there is a status in bottom left saying: "Running (5 requests in progress, 0 requests queued)". - In Logger++ I can see 5 requests saying "Timed Out" in comments. So apparently, burp scanning engine threads are still running and are still waiting for an answer, effectively blocking the scan. I do not have any specific error in the Dashboard > Event log.

Isaak | Last updated: Nov 06, 2020 10:59AM UTC

And here are the Help > diagnostics. You can see the 5 task-3-active-worker that are blocked on read and that are not actually timing out. exe4j.moduleName /home/user/BurpSuitePro/BurpSuitePro file.encoding UTF-8 file.separator / install4j.appDir /home/user/BurpSuitePro/ install4j.exeDir /home/user/BurpSuitePro/ install4j.jvmDir /home/user/BurpSuitePro/jre install4j.launcherId 70 install4j.swt false java.class.path /home/user/BurpSuitePro/.install4j/i4jruntime.jar:/home/user/BurpSuitePro/.install4j/launcherccf7dac9.jar:/home/user/BurpSuitePro/burpsuite_pro.jar java.class.version 58.0 java.home /home/user/BurpSuitePro/jre java.io.tmpdir /tmp java.library.path /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib java.runtime.name OpenJDK Runtime Environment java.runtime.version 14+36-1461 java.specification.name Java Platform API Specification java.specification.vendor Oracle Corporation java.specification.version 14 java.vendor Oracle Corporation java.vendor.url https://java.oracle.com/ java.vendor.url.bug https://bugreport.java.com/bugreport/ java.version 14 java.version.date 2020-03-17 java.vm.compressedOopsMode 32-bit java.vm.info mixed mode java.vm.name OpenJDK 64-Bit Server VM java.vm.specification.name Java Virtual Machine Specification java.vm.specification.vendor Oracle Corporation java.vm.specification.version 14 java.vm.vendor Oracle Corporation java.vm.version 14+36-1461 jdk.debug release jdk.tls.allowUnsafeServerCertChange true jsse.enableSNIExtension false org.bouncycastle.jsse.client.dh.minimumPrimeBits 1024 org.bouncycastle.jsse.client.dh.unrestrictedGroups true os.arch amd64 os.name Linux os.version 4.19.152-1.pvops.qubes.x86_64 path.separator : sun.arch.data.model 64 sun.awt.enableExtraMouseButtons true sun.boot.library.path /home/user/BurpSuitePro/jre/lib sun.cpu.endian little sun.font.fontmanager sun.awt.X11FontManager sun.io.unicode.encoding UnicodeLittle sun.java.command install4j.burp.StartBurp sun.java.launcher SUN_STANDARD sun.jnu.encoding UTF-8 sun.management.compiler HotSpot 64-Bit Tiered Compilers user.country US user.dir /home/user/BurpSuitePro user.home /home/user user.language en user.name user user.timezone Europe/Luxembourg Burp Version 2020.9.2 Burp Browser Version 85.0.4183.121-1 Burp Browser binaries /home/user/BurpSuitePro/burpbrowser/85.0.4183.121-1 Code source /home/user/BurpSuitePro/burpsuite_pro.jar Debug ID kfpyw7aqib6nrc3m8nun:ardu JAR type Installer currenttimemillis 1604659991261 nanotime 12203637561330 superuser false PATH /usr/local/sbin:/usr/local/bin:/usr/bin:/opt/android-sdk/platform-tools:/usr/lib/jvm/default/bin:/usr/bin/site_perl:/usr/bin/vendor_perl:/usr/bin/core_perl:/opt/android-sdk/platform-tools:/usr/lib/jvm/default/bin:/usr/bin/site_perl:/usr/bin/vendor_perl:/usr/bin/core_perl:/home/user/tools/bin:/home/user/.local/bin:/opt/android-sdk/build-tools/27.0.1/ QREXEC_AGENT_PID 1177 QREXEC_SERVICE_ARGUMENT terminator TERM xterm-256color DBUS_SESSION_BUS_ADDRESS unix:path=/run/user/1000/bus LANG en_US.UTF-8 TERMINATOR_DBUS_PATH /net/tenshu/Terminator2 XDG_SESSION_ID 1 XDG_SESSION_TYPE x11 DISPLAY :0 MAIL /var/spool/mail/user VMTYPE AppVM MOZ_PLUGIN_PATH /usr/lib/mozilla/plugins COLORTERM truecolor UPDTYPE NonUpdateableVM QUBES_KEYMAP xkb_keymap { include { include { include { include { include LOGNAME user PWD /home/user/BurpSuitePro XDG_SESSION_CLASS user QREXEC_REMOTE_DOMAIN dom0 QUBES_ENV_SOURCED 1 SHELL /bin/bash QT_X11_NO_MITSHM 1 GIO_LAUNCHED_DESKTOP_FILE /usr/share/applications/terminator.desktop TERMINATOR_DBUS_NAME net.tenshu.Terminator20x1a6021154d881c OLDPWD /home/user/BurpSuitePro/jre USER user GIO_LAUNCHED_DESKTOP_FILE_PID 1201 VTE_VERSION 6001 WINDOWPATH 7 TERMINATOR_UUID urn:uuid:daa8aa09-6be1-4454-bc6f-33a223cebb9d GNOME_DESKTOP_SESSION_ID 1 XDG_SEAT seat0 XDG_RUNTIME_DIR /run/user/1000 XDG_VTNR 7 QUBES_USER_KEYMAP SHLVL 2 HOME /home/user SAML Raider Extension type: Java, Method: registerExtenderCallbacks, HTTP listeners: 1, Message editor tabs: 1, Suite tabs: 1 Authz Extension type: Java AuthMatrix Extension type: Python TokenJar Extension type: Java, Method: registerExtenderCallbacks, Extension state listeners: 1, HTTP listeners: 1, Proxy listeners: 1, Suite tabs: 1 Logger++ Extension type: Java, Method: registerExtenderCallbacks, Extension state listeners: 1, HTTP listeners: 1, Proxy listeners: 1, Context menu providers: 1, Suite tabs: 1 Total memory 629,145,600 Max memory 1,298,137,088 Free memory 349,613,192 Number of processors 4 --------------------------------------------------------------------------------------------------------- RUNNING TASKS --------------------------------------------------------------------------------------------------------- Task 1 Type Live passive crawl Resource pool Custom resource pool 2 Paused false Number of requests 0 Number of failed requests 0 Number of in-progress requests 0 Number of queued requests 0 Active work lock java.util.concurrent.locks.ReentrantLock@1d5ea989[Unlocked] Active work queue 0 Priority passive work queue 0 Active workers 0 Closed false Priority passive queue decrease false Pending request engine decrease false Throttling lock java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Closed false Paused false Paused queued requests <null> Paused non-queued requests <null> --------------------------------------------------------------------------------------------------------- Task 2 Type Live audit Resource pool Default resource pool Paused false Number of requests 14 Number of failed requests 0 Number of in-progress requests 0 Number of queued requests 0 Active work lock java.util.concurrent.locks.ReentrantLock@784bbe01[Unlocked] Active work queue 0 Priority passive work queue 0 Active workers 0 Closed false Priority passive queue decrease false Pending request engine decrease false Throttling lock java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Closed false Paused false Paused queued requests <null> Paused non-queued requests <null> --------------------------------------------------------------------------------------------------------- Task 3 Type Audit Resource pool Custom resource pool 8 Paused false Number of requests 38515 Number of failed requests 100 Number of in-progress requests 5 Number of queued requests 0 Active work lock java.util.concurrent.locks.ReentrantLock@2531867b[Unlocked] Active work queue 0 Priority passive work queue 0 Active workers 5 Closed false Priority passive queue decrease false Pending request engine decrease false Throttling lock java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Closed false Paused false Paused queued requests <null> Paused non-queued requests <null> Queue size 28 Pass Number 0 --------------------------------------------------------------------------------------------------------- | LIVE | uni | unf | chk | err | prg | pn | fin | | P1 | 28 | 28 | 28 | false | -1 | 0 | false | | P2 | 28 | 28 | 28 | false | -1 | 0 | false | | S1 | 28 | 28 | 28 | false | -1 | 0 | false | | A1 | 28 | 1 | 0 | true | 5 | 0 | false | | A2 | 0 | 0 | 0 | false | -1 | 0 | false | | A3 | 0 | 0 | 0 | false | -1 | 0 | false | | A4 | 0 | 0 | 0 | false | -1 | 0 | false | | S2 | 0 | 0 | 0 | false | -1 | 0 | false | | S3 | 0 | 0 | 0 | false | -1 | 0 | false | | A5 | 0 | 0 | 0 | false | -1 | 0 | false | --------------------------------------------------------------------------------------------------------- | PERS | uni | unf | chk | err | prg | pn | fin | | P1 | 28 | 28 | 28 | false | -1 | 0 | false | | P2 | 28 | 28 | 28 | false | -1 | 0 | false | | S1 | 28 | 28 | 28 | false | -1 | 0 | false | | A1 | 28 | 1 | 0 | true | 5 | 0 | false | | A2 | 0 | 0 | 0 | false | -1 | 0 | false | | A3 | 0 | 0 | 0 | false | -1 | 0 | false | | A4 | 0 | 0 | 0 | false | -1 | 0 | false | | S2 | 0 | 0 | 0 | false | -1 | 0 | false | | S3 | 0 | 0 | 0 | false | -1 | 0 | false | | A5 | 0 | 0 | 0 | false | -1 | 0 | false | --------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------- RESOURCE POOLS --------------------------------------------------------------------------------------------------------- Name Default resource pool Concurrent request limit 10 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821357057 Last resume request time 6392433606581 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821387770 Last resume time nanos 6392433619715 --------------------------------------------------------------------------------------------------------- Name Not too fast Concurrent request limit 3 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821408900 Last resume request time 6392433635765 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821410758 Last resume time nanos 6392433638744 Throttle interval 200 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Be fair Concurrent request limit 5 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821412535 Last resume request time 6392433641981 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821413722 Last resume time nanos 6392433644318 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 2 Concurrent request limit 5 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821414932 Last resume request time 6392433647052 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821416065 Last resume time nanos 6392433672800 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 3 Concurrent request limit 6 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821417217 Last resume request time 6392433675572 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821418281 Last resume time nanos 6392433677813 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 4 Concurrent request limit 10 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821419571 Last resume request time 6392433680177 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821420650 Last resume time nanos 6392433682413 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 5 Concurrent request limit 15 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821421745 Last resume request time 6392433684802 Number of in progress requests 5 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821422801 Last resume time nanos 6392433687064 Throttle interval 200 Throttle random false Latest request time nanos 6913908273642 --------------------------------------------------------------------------------------------------------- Name Custom resource pool 1 Concurrent request limit 6 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821423941 Last resume request time 6392433689692 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821424962 Last resume time nanos 6392433692454 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 6 Concurrent request limit 12 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821441782 Last resume request time 6392433695046 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821443193 Last resume time nanos 6392433697463 Throttle interval 100 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 7 Concurrent request limit 30 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 6385821444489 Last resume request time 6392433699860 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 6385821445567 Last resume time nanos 6392433702119 Throttle interval 200 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- Name Custom resource pool 8 Concurrent request limit 50 Lock state java.util.concurrent.locks.ReentrantLock@3fd0efbc[Unlocked] Last pause request time 0 Last resume request time 0 Number of in progress requests 0 Paused false Queue size 0 Queued requests [] Last pause time nanos 0 Last resume time nanos 0 Throttle interval 150 Throttle random false Latest request time nanos <null> --------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------- BROWSER POOL --------------------------------------------------------------------------------------------------------- Can create new browser true Returning 0 Number of blocked clients 0 Total active browsers 0 Total number of browsers created 0 --------------------------------------------------------------------------------------------------------- CURRENT THREADS --------------------------------------------------------------------------------------------------------- Reference Handler native=false, suspended=false, block=7, wait=0 lock=null owned by null (-1), cpu=66, user=0 java.base@14/java.lang.ref.Reference.waitForReferencePendingList(Native Method) java.base@14/java.lang.ref.Reference.processPendingReferences(Reference.java:241) java.base@14/java.lang.ref.Reference$ReferenceHandler.run(Reference.java:213) Finalizer native=false, suspended=false, block=45, wait=48 lock=java.lang.ref.ReferenceQueue$Lock@2bfffacd owned by null (-1), cpu=5, user=0 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:155) java.base@14/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:176) java.base@14/java.lang.ref.Finalizer$FinalizerThread.run(Finalizer.java:170) Signal Dispatcher native=false, suspended=false, block=0, wait=0 lock=null owned by null (-1), cpu=0, user=0 Common-Cleaner native=false, suspended=false, block=55, wait=143 lock=java.lang.ref.ReferenceQueue$Lock@4a450186 owned by null (-1), cpu=7, user=0 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:155) java.base@14/jdk.internal.ref.CleanerImpl.run(CleanerImpl.java:148) java.base@14/java.lang.Thread.run(Thread.java:832) java.base@14/jdk.internal.misc.InnocuousThread.run(InnocuousThread.java:134) Notification Thread native=false, suspended=false, block=0, wait=0 lock=null owned by null (-1), cpu=33, user=30 Timer-0 native=false, suspended=false, block=0, wait=195 lock=java.util.TaskQueue@17809c8b owned by null (-1), cpu=75, user=50 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) AWT-XAWT native=true, suspended=false, block=4, wait=1396 lock=null owned by null (-1), cpu=3899, user=2960 java.desktop@14/sun.awt.X11.XToolkit.waitForEvents(Native Method) java.desktop@14/sun.awt.X11.XToolkit.run(XToolkit.java:692) java.desktop@14/sun.awt.X11.XToolkit.run(XToolkit.java:656) java.base@14/java.lang.Thread.run(Thread.java:832) Java2D Disposer native=false, suspended=false, block=43, wait=70 lock=java.lang.ref.ReferenceQueue$Lock@6000713d owned by null (-1), cpu=12, user=10 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:155) java.base@14/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:176) java.desktop@14/sun.java2d.Disposer.run(Disposer.java:144) java.base@14/java.lang.Thread.run(Thread.java:832) TimerQueue native=false, suspended=false, block=2, wait=8953 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@5106fc60 owned by null (-1), cpu=520, user=360 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.DelayQueue.take(DelayQueue.java:229) java.desktop@14/javax.swing.TimerQueue.run(TimerQueue.java:171) java.base@14/java.lang.Thread.run(Thread.java:832) pool-5-thread-1 native=false, suspended=false, block=0, wait=11 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@332d9ef7 owned by null (-1), cpu=0, user=0 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-4-thread-1 native=false, suspended=false, block=0, wait=2 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@205a28dd owned by null (-1), cpu=0, user=0 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:341) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionNode.block(AbstractQueuedSynchronizer.java:505) java.base@14/java.util.concurrent.ForkJoinPool.managedBlock(ForkJoinPool.java:3137) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.await(AbstractQueuedSynchronizer.java:1614) java.base@14/java.util.concurrent.LinkedBlockingQueue.take(LinkedBlockingQueue.java:435) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-platform-thread-1 native=true, suspended=false, block=0, wait=0 lock=null owned by null (-1), cpu=0, user=0 java.base@14/sun.nio.ch.Net.accept(Native Method) java.base@14/sun.nio.ch.NioSocketImpl.accept(NioSocketImpl.java:755) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:684) java.base@14/java.net.ServerSocket.platformImplAccept(ServerSocket.java:650) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:626) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:583) java.base@14/java.net.ServerSocket.accept(ServerSocket.java:540) app//burp.fo_.run(Unknown Source) java.base@14/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) java.base@14/java.util.concurrent.FutureTask.run(FutureTask.java:264) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-platform-thread-2 native=false, suspended=false, block=0, wait=1 lock=java.util.concurrent.SynchronousQueue$TransferStack@43b02c72 owned by null (-1), cpu=173, user=160 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) AWT-Shutdown native=false, suspended=false, block=38, wait=39 lock=java.lang.Object@25b32d98 owned by null (-1), cpu=0, user=0 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.Object.wait(Object.java:321) java.desktop@14/sun.awt.AWTAutoShutdown.run(AWTAutoShutdown.java:291) java.base@14/java.lang.Thread.run(Thread.java:832) AWT-EventQueue-0 native=false, suspended=false, block=830, wait=61202 lock=null owned by null (-1), cpu=26224, user=24320 java.management@14/sun.management.ThreadImpl.getThreadInfo1(Native Method) java.management@14/sun.management.ThreadImpl.getThreadInfo(ThreadImpl.java:195) app//burp.fjm.a(Unknown Source) app//burp.dui.a(Unknown Source) app//burp.dui.a(Unknown Source) app//burp.dui.a(Unknown Source) app//burp.e4q.actionPerformed(Unknown Source) java.desktop@14/javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1967) java.desktop@14/javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2308) java.desktop@14/javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:405) java.desktop@14/javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:262) java.desktop@14/javax.swing.AbstractButton.doClick(AbstractButton.java:369) java.desktop@14/javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:1020) java.desktop@14/javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:1064) java.desktop@14/java.awt.Component.processMouseEvent(Component.java:6636) java.desktop@14/javax.swing.JComponent.processMouseEvent(JComponent.java:3342) java.desktop@14/java.awt.Component.processEvent(Component.java:6401) java.desktop@14/java.awt.Container.processEvent(Container.java:2263) java.desktop@14/java.awt.Component.dispatchEventImpl(Component.java:5012) java.desktop@14/java.awt.Container.dispatchEventImpl(Container.java:2321) java.desktop@14/java.awt.Component.dispatchEvent(Component.java:4844) java.desktop@14/java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4919) java.desktop@14/java.awt.LightweightDispatcher.processMouseEvent(Container.java:4548) java.desktop@14/java.awt.LightweightDispatcher.dispatchEvent(Container.java:4489) java.desktop@14/java.awt.Container.dispatchEventImpl(Container.java:2307) java.desktop@14/java.awt.Window.dispatchEventImpl(Window.java:2764) java.desktop@14/java.awt.Component.dispatchEvent(Component.java:4844) java.desktop@14/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:772) java.desktop@14/java.awt.EventQueue$4.run(EventQueue.java:721) java.desktop@14/java.awt.EventQueue$4.run(EventQueue.java:715) java.base@14/java.security.AccessController.executePrivileged(AccessController.java:753) java.base@14/java.security.AccessController.doPrivileged(AccessController.java:391) java.base@14/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:85) java.base@14/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:95) java.desktop@14/java.awt.EventQueue$5.run(EventQueue.java:745) java.desktop@14/java.awt.EventQueue$5.run(EventQueue.java:743) java.base@14/java.security.AccessController.executePrivileged(AccessController.java:753) java.base@14/java.security.AccessController.doPrivileged(AccessController.java:391) java.base@14/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:85) java.desktop@14/java.awt.EventQueue.dispatchEvent(EventQueue.java:742) java.desktop@14/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:203) java.desktop@14/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:124) java.desktop@14/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:113) java.desktop@14/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:109) java.desktop@14/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101) java.desktop@14/java.awt.EventDispatchThread.run(EventDispatchThread.java:90) DestroyJavaVM native=false, suspended=false, block=0, wait=0 lock=null owned by null (-1), cpu=3341, user=3160 pool-platform-thread-3 native=false, suspended=false, block=0, wait=1 lock=java.util.concurrent.SynchronousQueue$TransferStack@43b02c72 owned by null (-1), cpu=0, user=0 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) SwingWorker-pool-9-thread-1 native=false, suspended=false, block=315, wait=329 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@7ab6d5ff owned by null (-1), cpu=2464, user=2330 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:341) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionNode.block(AbstractQueuedSynchronizer.java:505) java.base@14/java.util.concurrent.ForkJoinPool.managedBlock(ForkJoinPool.java:3137) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.await(AbstractQueuedSynchronizer.java:1614) java.base@14/java.util.concurrent.LinkedBlockingQueue.take(LinkedBlockingQueue.java:435) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-12-thread-1 native=false, suspended=false, block=0, wait=582 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@bdb16b4 owned by null (-1), cpu=113, user=0 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) browser-recycler-1 native=false, suspended=false, block=0, wait=572843 lock=null owned by null (-1), cpu=17218, user=12040 java.base@14/java.lang.Thread.sleep(Native Method) app//burp.gwm.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-scheduled-project-thread-1 native=false, suspended=false, block=1, wait=1848 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@494a6801 owned by null (-1), cpu=277, user=250 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-15-thread-1 native=false, suspended=false, block=0, wait=11 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@7529435d owned by null (-1), cpu=42, user=40 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) passive-worker-1 native=false, suspended=false, block=739, wait=595 lock=java.lang.Object@397c792a owned by null (-1), cpu=2811, user=2790 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.Object.wait(Object.java:321) app//burp.fpl.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) passive-worker-2 native=false, suspended=false, block=908, wait=767 lock=java.lang.Object@6a41a607 owned by null (-1), cpu=1195, user=1160 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.Object.wait(Object.java:321) app//burp.fpl.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) passive-worker-3 native=false, suspended=false, block=894, wait=737 lock=java.lang.Object@70d1c12e owned by null (-1), cpu=2802, user=2590 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.Object.wait(Object.java:321) app//burp.fpl.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-19-thread-1 native=false, suspended=false, block=0, wait=582 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@4fdd47c2 owned by null (-1), cpu=159, user=100 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-project-thread-2 native=true, suspended=false, block=0, wait=1 lock=null owned by null (-1), cpu=30, user=20 java.base@14/sun.nio.ch.Net.accept(Native Method) java.base@14/sun.nio.ch.NioSocketImpl.accept(NioSocketImpl.java:755) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:684) java.base@14/java.net.ServerSocket.platformImplAccept(ServerSocket.java:650) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:626) java.base@14/java.net.ServerSocket.implAccept(ServerSocket.java:583) java.base@14/java.net.ServerSocket.accept(ServerSocket.java:540) app//burp.ftv.run(Unknown Source) java.base@14/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) java.base@14/java.util.concurrent.FutureTask.run(FutureTask.java:264) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-project-thread-5 native=false, suspended=false, block=0, wait=1 lock=java.util.LinkedList@15b2c23a owned by null (-1), cpu=0, user=0 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.lang.Object.wait(Object.java:321) app//burp.dg4.i(Unknown Source) app//burp.dg4.run(Unknown Source) java.base@14/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) java.base@14/java.util.concurrent.FutureTask.run(FutureTask.java:264) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) Timer-1 native=false, suspended=false, block=0, wait=23253 lock=java.util.TaskQueue@72a42f15 owned by null (-1), cpu=1608, user=1150 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) Timer-2 native=false, suspended=false, block=2, wait=23253 lock=java.util.TaskQueue@c0248de owned by null (-1), cpu=2218, user=1040 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) Timer-3 native=false, suspended=false, block=1, wait=23253 lock=java.util.TaskQueue@29c4fdcb owned by null (-1), cpu=1558, user=1140 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) LPP-LogManager-Cleanup-Thread-1 native=false, suspended=false, block=0, wait=194 lock=java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject@2ae449db owned by null (-1), cpu=27, user=20 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:252) java.base@14/java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:1661) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:1182) java.base@14/java.util.concurrent.ScheduledThreadPoolExecutor$DelayedWorkQueue.take(ScheduledThreadPoolExecutor.java:899) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) task-3-active-worker-5 native=true, suspended=false, block=5, wait=8 lock=null owned by null (-1), cpu=24, user=20 java.base@14/sun.nio.ch.SocketDispatcher.read0(Native Method) java.base@14/sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:47) java.base@14/sun.nio.ch.NioSocketImpl.tryRead(NioSocketImpl.java:261) java.base@14/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:312) java.base@14/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350) java.base@14/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803) java.base@14/java.net.Socket$SocketInputStream.read(Socket.java:982) java.base@14/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:457) java.base@14/sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:68) java.base@14/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1411) java.base@14/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1022) java.base@14/java.io.InputStream.read(InputStream.java:218) app//burp.bms.a(Unknown Source) app//burp.bm4.b(Unknown Source) app//burp.e_p.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.e46.a(Unknown Source) app//burp.cei.a(Unknown Source) app//burp.gyr.a(Unknown Source) app//burp.fq1.a(Unknown Source) app//burp.g05.lambda$issueRequest$1(Unknown Source) app//burp.g05$$Lambda$1053/0x0000000100bd8440.a(Unknown Source) app//burp.cvn.a(Unknown Source) app//burp.c56.a(Unknown Source) app//burp.g05.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.a8.a(Unknown Source) app//burp.a8.a(Unknown Source) app//burp.rj.a(Unknown Source) app//burp.rj.a(Unknown Source) app//burp.ahx.a(Unknown Source) app//burp.exy.a(Unknown Source) app//burp.b1g.a(Unknown Source) app//burp.gyg.a(Unknown Source) app//burp.ak1.a(Unknown Source) app//burp.gi_.run(Unknown Source) app//burp.d8j.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) task-3-active-worker-12 native=true, suspended=false, block=1843, wait=2100 lock=null owned by null (-1), cpu=3863, user=3780 java.base@14/sun.nio.ch.SocketDispatcher.read0(Native Method) java.base@14/sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:47) java.base@14/sun.nio.ch.NioSocketImpl.tryRead(NioSocketImpl.java:261) java.base@14/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:312) java.base@14/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350) java.base@14/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803) java.base@14/java.net.Socket$SocketInputStream.read(Socket.java:982) java.base@14/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:457) java.base@14/sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:68) java.base@14/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1411) java.base@14/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1022) java.base@14/java.io.InputStream.read(InputStream.java:218) app//burp.bms.a(Unknown Source) app//burp.bm4.b(Unknown Source) app//burp.e_p.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.e46.a(Unknown Source) app//burp.cei.a(Unknown Source) app//burp.gyr.a(Unknown Source) app//burp.fq1.a(Unknown Source) app//burp.g05.lambda$issueRequest$1(Unknown Source) app//burp.g05$$Lambda$1053/0x0000000100bd8440.a(Unknown Source) app//burp.cvn.a(Unknown Source) app//burp.c56.a(Unknown Source) app//burp.g05.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.bhl.a(Unknown Source) app//burp.fcg.a(Unknown Source) app//burp.c_v.a(Unknown Source) app//burp.ak1.a(Unknown Source) app//burp.gi_.run(Unknown Source) app//burp.d8j.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) task-3-active-worker-13 native=true, suspended=false, block=1854, wait=2120 lock=null owned by null (-1), cpu=3869, user=3780 java.base@14/sun.nio.ch.SocketDispatcher.read0(Native Method) java.base@14/sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:47) java.base@14/sun.nio.ch.NioSocketImpl.tryRead(NioSocketImpl.java:261) java.base@14/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:312) java.base@14/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350) java.base@14/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803) java.base@14/java.net.Socket$SocketInputStream.read(Socket.java:982) java.base@14/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:457) java.base@14/sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:68) java.base@14/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1411) java.base@14/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1022) java.base@14/java.io.InputStream.read(InputStream.java:218) app//burp.bms.a(Unknown Source) app//burp.bm4.b(Unknown Source) app//burp.e_p.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.e46.a(Unknown Source) app//burp.cei.a(Unknown Source) app//burp.gyr.a(Unknown Source) app//burp.fq1.a(Unknown Source) app//burp.g05.lambda$issueRequest$1(Unknown Source) app//burp.g05$$Lambda$1053/0x0000000100bd8440.a(Unknown Source) app//burp.cvn.a(Unknown Source) app//burp.c56.a(Unknown Source) app//burp.g05.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.bhl.a(Unknown Source) app//burp.fcg.a(Unknown Source) app//burp.c_v.a(Unknown Source) app//burp.ak1.a(Unknown Source) app//burp.gi_.run(Unknown Source) app//burp.d8j.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) Timer-4 native=false, suspended=false, block=1, wait=23185 lock=java.util.TaskQueue@796b0715 owned by null (-1), cpu=1370, user=1070 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) Timer-5 native=false, suspended=false, block=0, wait=2319 lock=java.util.TaskQueue@6731e45e owned by null (-1), cpu=125, user=90 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) Timer-6 native=false, suspended=false, block=0, wait=2319 lock=java.util.TaskQueue@691577d6 owned by null (-1), cpu=124, user=60 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) Timer-7 native=false, suspended=false, block=0, wait=2319 lock=java.util.TaskQueue@613751be owned by null (-1), cpu=85, user=80 java.base@14/java.lang.Object.wait(Native Method) java.base@14/java.util.TimerThread.mainLoop(Timer.java:553) java.base@14/java.util.TimerThread.run(Timer.java:506) pool-platform-thread-4 native=false, suspended=false, block=0, wait=1 lock=java.util.concurrent.SynchronousQueue$TransferStack@43b02c72 owned by null (-1), cpu=0, user=0 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-platform-thread-5 native=false, suspended=false, block=0, wait=7 lock=java.util.concurrent.SynchronousQueue$TransferStack@43b02c72 owned by null (-1), cpu=15, user=10 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) task-3-active-worker-17 native=true, suspended=false, block=67, wait=78 lock=null owned by null (-1), cpu=40, user=30 java.base@14/sun.nio.ch.SocketDispatcher.read0(Native Method) java.base@14/sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:47) java.base@14/sun.nio.ch.NioSocketImpl.tryRead(NioSocketImpl.java:261) java.base@14/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:312) java.base@14/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350) java.base@14/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803) java.base@14/java.net.Socket$SocketInputStream.read(Socket.java:982) java.base@14/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:457) java.base@14/sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:68) java.base@14/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1411) java.base@14/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1022) java.base@14/java.io.InputStream.read(InputStream.java:218) app//burp.bms.a(Unknown Source) app//burp.bm4.b(Unknown Source) app//burp.e_p.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.e46.a(Unknown Source) app//burp.cei.a(Unknown Source) app//burp.gyr.a(Unknown Source) app//burp.fq1.a(Unknown Source) app//burp.g05.lambda$issueRequest$1(Unknown Source) app//burp.g05$$Lambda$1053/0x0000000100bd8440.a(Unknown Source) app//burp.cvn.a(Unknown Source) app//burp.c56.a(Unknown Source) app//burp.g05.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.bhl.a(Unknown Source) app//burp.fcg.a(Unknown Source) app//burp.c_v.a(Unknown Source) app//burp.ak1.a(Unknown Source) app//burp.gi_.run(Unknown Source) app//burp.d8j.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) task-3-active-worker-22 native=true, suspended=false, block=11, wait=16 lock=null owned by null (-1), cpu=7, user=0 java.base@14/sun.nio.ch.SocketDispatcher.read0(Native Method) java.base@14/sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:47) java.base@14/sun.nio.ch.NioSocketImpl.tryRead(NioSocketImpl.java:261) java.base@14/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:312) java.base@14/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350) java.base@14/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803) java.base@14/java.net.Socket$SocketInputStream.read(Socket.java:982) java.base@14/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:457) java.base@14/sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:68) java.base@14/sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1411) java.base@14/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:1022) java.base@14/java.io.InputStream.read(InputStream.java:218) app//burp.bms.a(Unknown Source) app//burp.bm4.b(Unknown Source) app//burp.e_p.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.g3d.a(Unknown Source) app//burp.e46.a(Unknown Source) app//burp.cei.a(Unknown Source) app//burp.gyr.a(Unknown Source) app//burp.fq1.a(Unknown Source) app//burp.g05.lambda$issueRequest$1(Unknown Source) app//burp.g05$$Lambda$1053/0x0000000100bd8440.a(Unknown Source) app//burp.cvn.a(Unknown Source) app//burp.c56.a(Unknown Source) app//burp.g05.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.ry.a(Unknown Source) app//burp.bhl.a(Unknown Source) app//burp.fcg.a(Unknown Source) app//burp.c_v.a(Unknown Source) app//burp.ak1.a(Unknown Source) app//burp.gi_.run(Unknown Source) app//burp.d8j.run(Unknown Source) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-project-thread-25 native=false, suspended=false, block=89, wait=188 lock=java.util.concurrent.SynchronousQueue$TransferStack@40c5a122 owned by null (-1), cpu=97, user=90 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-project-thread-26 native=false, suspended=false, block=61, wait=115 lock=java.util.concurrent.SynchronousQueue$TransferStack@40c5a122 owned by null (-1), cpu=57, user=50 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832) pool-project-thread-27 native=false, suspended=false, block=66, wait=82 lock=java.util.concurrent.SynchronousQueue$TransferStack@40c5a122 owned by null (-1), cpu=16197, user=15270 java.base@14/jdk.internal.misc.Unsafe.park(Native Method) java.base@14/java.util.concurrent.locks.LockSupport.park(LockSupport.java:211) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460) java.base@14/java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:361) java.base@14/java.util.concurrent.SynchronousQueue.take(SynchronousQueue.java:920) java.base@14/java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1056) java.base@14/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1116) java.base@14/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) java.base@14/java.lang.Thread.run(Thread.java:832)

Liam, PortSwigger Agent | Last updated: Nov 06, 2020 02:51PM UTC

Thanks for this report. We'll investigate and get back to you ASAP.

Liam, PortSwigger Agent | Last updated: Nov 09, 2020 06:50PM UTC

Hi Isaak, a few questions: Have you changed the Timeouts section of the project options at all? Do you encounter the same issue if you use the default resource pool? When the server drops the connection, does it send a TCP RST packet, or just not answer the request?

Isaak | Last updated: Nov 10, 2020 01:11PM UTC

Hello, 1/ Timeout seetings are default: 120 10 300 60 2/ I cannot use the default resource pool as it is way too aggressive. I either crash the application or get rejected probably by the WAF because of too much requests / minutes. One thing I however observed is that when starting with a small threading setting (eg: 3 max concurrent requests), I sometimes can continue a scan that hangs by switching to a more aggressive pool (such as 5 or 10 concurrent requests). 3/ I will check that and come back to you.

Isaak | Last updated: Nov 10, 2020 01:35PM UTC

2/ When using the default resource pool, I still see the staled requests (eg: 1 request in progress, 2 request queued), even when I pause the scan, I see number of requests decreasing up to the number of staled requests observed in Logger++ (appears as Timed Out in logger++ but apparently the scanner still considers the requests live). I also see that the number of requests do not change for the Audit item. 3/ I see no reset in wireshark. I have done some tests with openssl s_client, and the behavior is the following: - The ssl connections opens properly - The ssl client sends the GET request to the server (I see Application Data so the SSL connection is still active) - The ssl clients waits for an answers that never comes, but the SSL connection is still alive and I don't even observe TCP keep alives in the traffic. If I remember some scans such as HTTP smuggling also cause the same issue.

Isaak | Last updated: Nov 10, 2020 01:35PM UTC

2/ When using the default resource pool, I still see the staled requests (eg: 1 request in progress, 2 request queued), even when I pause the scan, I see number of requests decreasing up to the number of staled requests observed in Logger++ (appears as Timed Out in logger++ but apparently the scanner still considers the requests live). I also see that the number of requests do not change for the Audit item. 3/ I see no reset in wireshark. I have done some tests with openssl s_client, and the behavior is the following: - The ssl connections opens properly - The ssl client sends the GET request to the server (I see Application Data so the SSL connection is still active) - The ssl clients waits for an answers that never comes, but the SSL connection is still alive and I don't even observe TCP keep alives in the traffic. If I remember some scans such as HTTP smuggling also cause the same issue.

Isaak | Last updated: Nov 11, 2020 01:42PM UTC

Hello, Here is a workaround I found for linux users: The problem is that burp suite apparently does not have socket read timeouts in some situations. So the solution is to force linux to be more aggressive on timeouts: $ sudo sysctl net.ipv4.tcp_keepalive_time=60 This way in our case, the connection starts and the server stop responding. After 60 seconds, linux will send a tcp keepalive (the default is 7200 seconds on my case). The TCP keepalive will be answered by the server with a reset because the connection has been dropped and burp will clean properly the connection. A side effect is that burp will show "Errors: request timeout" but will happily continue the scan. Also one should take care of changing the Scan Configuration: "Handling Application Errors During Audit" to avoid stopping the scan after only 2 timeouts (I changed it to 20).

Liam, PortSwigger Agent | Last updated: Nov 11, 2020 02:19PM UTC

Hi Isaak, thanks for the detailed information and workaround. It looks like we've had a regression in our network code at some point in the past and certain scan checks are sending requests with no socket timeout. We'll get this fixed ASAP. Our Scanner team has proposed these two options: 1) change the server to close the connection rather than just hanging if an invalid host header is sent. 2) disable the collaborator in misc options. The reason you're still seeing the host header payload even after disabling header insertion points is that it's not an insertion point level check which is doing it. The collaborator everywhere check runs per host and puts a collaborator payload in a few places, one of which being the host header. Because it's not an insertion point level check (it builds a request from scratch rather than modifying an existing one) it doesn't pay attention to that config. The only way to disable it is to disable the collaborator. We realize these solutions are not ideal and we will get this fixed as a priority.

RosaParrish | Last updated: Feb 09, 2023 09:04PM UTC