Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Spidering only POST

Karthik | Last updated: Sep 25, 2015 06:42AM UTC

Hello, I would like to spider only POST requests (and follow redirection). Is it possible ? I verified if there are any options to define the scope based on POST method, but I couldnt find any. In short, I would like to test only POST request (I know while click on perform active scan,we can select only POST request, but I want to achieve that while spidering ) This is reduce time and bandwidth

PortSwigger Agent | Last updated: Sep 25, 2015 08:09AM UTC

There isn't a way to only spider POST requests, sorry, and in general this wouldn't achieve full coverage of an application's content. If you really wanted to do this, as a hack you could write an extension that registers an IHttpListener and looks for requests being made by the Spider using a non-POST method. You could then modify the request to clear it, or redirect the host to localhost, or similar, so that the request doesn't actually get issued to the target.

Burp User | Last updated: Sep 28, 2015 01:55PM UTC