Burp Suite User Forum

Login to post

scanning report issue

Bappe | Last updated: Dec 17, 2019 04:25AM UTC

Why report is different for following scenario: a. Scan without any pause or interrupt. b. Scan with few pause or burp restart example: for option "a" the scan found 10 issues and for option "b" the scan found 9 issues on the same target and same scan configuration.

Liam, PortSwigger Agent | Last updated: Dec 17, 2019 11:13AM UTC

It's not clear why this difference in results might have occurred. How many times have you run this test? Are you able to reproduce this consistently? Are you able to manually verify the results of the scan? The actual impact and validity of any issue will always depend on the nature of the application functionality and the business context in which it appears. Hence, issues should always be manually reviewed based on the tester's knowledge of the application.

You need to Log in to post a reply. Or register here, for free.