Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Session Handling Rules doesn't work

Kirill | Last updated: Jul 24, 2020 07:36AM UTC

Hi, I founded bug with session handling rules. I wrote custom rules to rewrite cookies if session is not valid. But when I restart my burp app, this rules doesn't work. To fix this problem I would go to my rules and open dialog window, scroll to down and only after that my rules will work. Thank you, Kirill

Liam, PortSwigger Agent | Last updated: Jul 24, 2020 08:51AM UTC

Thanks for this report, Kirill. What dialog box are you referring to? Would it be possible to provide a screen-recording to demonstrate the issue?

Kirill | Last updated: Jul 24, 2020 10:31AM UTC

I mean Session Handling Rules editor window I upload record to drive: https://drive.google.com/file/d/1cb8TZ5SWKEMo6iJ-L-L4DBh41kx-UB-l/view?usp=sharing

Liam, PortSwigger Agent | Last updated: Jul 24, 2020 01:27PM UTC

Kirill, we'd like to check how you are closing and reopening Burp? Are you saving and reloading your project options?

Kirill | Last updated: Jul 24, 2020 01:47PM UTC

I record process of closing and opening project. https://drive.google.com/file/d/1bfPAXpscTU8Z_VMQYZtNxLqMemudzM_W/view?usp=sharing

Liam, PortSwigger Agent | Last updated: Jul 27, 2020 10:51AM UTC

Thanks for the video. Would it be possible to send us a copy of the project file to help us reproduce this behavior? If so, you can email us via support@portswigger.net.

Liam, PortSwigger Agent | Last updated: Jul 27, 2020 11:44AM UTC

We've taken another look at the video. The session handling cookie jar is not persisted as they are going to have short lifetimes on the server, so when you restart Burp it will be empty. Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.