Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Session Validity Check

Sebastian | Last updated: Feb 20, 2018 11:26AM UTC

Hello, I have a couple of cases where I need two session handling rules: 1. One for logging in after deauth/logout 2. One for checking for 500 responses and reacting with a POST When I fire the request (causing logout) and check the tracer, it detects the invalid session and executes the login macro, so all fine. When I fire the request (causing 500) and check the tracer, it runs the first session check and finds the session is valid, then it stops checking for the second condition. In my opinion it should sequentially go through all rules (&&) instead of quitting after the first condition returns true (||). Thanks, Sebastian

Liam, PortSwigger Agent | Last updated: Feb 20, 2018 03:02PM UTC

At a first look this sounds like a reasonable feature request. We'll discuss this internally and see if we can implement this. In the meantime, a simple extension would be able to help you. Please let us know if you need any further assistance.

Burp User | Last updated: Mar 02, 2018 12:38PM UTC