Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Testing web apps that use AD authentication through the Burpsuite Proxy

Rudolph, | Last updated: Apr 28, 2022 08:09PM UTC

I am trying to run an active scan on an internal app that uses AD authentication. The app calls a different internal website to do the authentication. It works fine without the burp proxy being on. When I enable the proxy and try to do a live scan, the authentication info is not accepted. I just get a popup message/form from the authentication site with the UserID and Password fields that says the application requires authentication. Any suggestions?

Liam, PortSwigger Agent | Last updated: Apr 28, 2022 08:28PM UTC