The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Simple SQLi identification failed

Luca | Last updated: Feb 11, 2016 09:14AM UTC

Hi, I found a little lack in SQLi identification, trying Burp on OWASP Bricks (https://www.owasp.org/index.php/OWASP_Bricks). In details, using active scan on "Login #4" page, Burp fails to identify the following SQLi: SELECT * FROM users WHERE name=("inj_param1") and password=("inj_param2") while all other SQLi have been properly discovered as expected. Best regards

Burp User | Last updated: Apr 06, 2016 08:31PM UTC