Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Scanning a "POST" causes a "GET" with no parameters

Don | Last updated: Apr 17, 2015 06:56PM UTC

I'm doing an active scan of a POST that has parameters for session ID, which is also stored in the cookie jar. However the attacks created by that scan produce "GET"s that have no parameters (no session ID) which causes my website to regenerate the session ID and thus subsequent attacks are all failing. So, how to I stop Burp Suite from generate a "GET" or alternatively have it include the session ID in the parameter?

PortSwigger Agent | Last updated: Apr 20, 2015 08:41AM UTC