The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Training Burp's crawler

Andreas | Last updated: Feb 07, 2019 12:54PM UTC

In the 1.x version, an approach to ensuring good coverage in complex apps was to add the site to the scope, start the spider, and then start manually browsing the site to ensure that all those components that the spider couldn't find, would be included and that the spider could continue crawling from new paths otherwise not reachable. How is this achieved in the 2.x version? With the "crawl and audit" task, there's no clear indication that the crawler is actually including those paths you manually followed, so it is a bit unclear if it purely relies on it's own ability to reach certain parts (such as unlinked pages) of the application.

Liam, PortSwigger Agent | Last updated: Feb 07, 2019 01:02PM UTC