The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Session handling rules - cookie not set for POST request

Lacy | Last updated: Aug 18, 2015 09:51PM UTC

I have set up a session handling rule that sends a certain cookie for all requests to a certain domain. What I have found however, is that that the cookie will be sent on all GET requests to the domain, but not sent with POST requests. Is this the intended functionality? Is there a way to force it to send with POST requests as well? I have tested that the cookie is being sent by using the Session Tracer. The Post requests do not show up in the handler and I have to edit them manually using the proxy tool in real time currently.

PortSwigger Agent | Last updated: Aug 19, 2015 09:56AM UTC