Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Updating Cookie Jar based on redirected responses

Lukáš | Last updated: May 19, 2015 07:24PM UTC

Hello! I'm having troubles updating burp's internal cookie jar based on redirected responses. Eg. I send a POST request to /whatever.jsp with a cookie SESS1=123, I get a response w/ 302 Found, when I follow the redirect I get a response and a Set-Cookie: SESS1=456. Next request therefore has to be sent w/ SESS1=456 otherwise it will be dropped/denied. Functionality very similar to _csrfToken, however even when setting Options -> Sessions -> Cookie Jar and checking Repeater there the cookie does not get stored in burp's internal cookie jar. I managed to make a workaround of a post-macro that updates the cookie based on the response to the post macro response, but that makes it really slow due to additional request for every request I want to make. Any idea why cookies are not updated based on responses received in Repeater? Thanks! Lukas

PortSwigger Agent | Last updated: Jun 10, 2015 11:25AM UTC