Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

username insertions

Liam | Last updated: Jun 22, 2020 11:31PM UTC

hello, we had some unexpected behavior today that I am trying to determine whether or not it was due to burpsuite scans. the developer noticed that something had inserted 5200 unique names into the database of the web application. The timing of the scan and the insertion of the data is way too close but no where in the parameters of the audit does it say username insertion. Is it possible that bps did this insertion? If so then I need to take responsibility but also just revealed a huge hole in security. Thank you

Uthman, PortSwigger Agent | Last updated: Jun 23, 2020 08:15AM UTC