Burp Suite User Forum

Login to post

Web Credentialed Scanning

Joseph | Last updated: Oct 16, 2019 12:45AM UTC

I can do a live scan and audit for vulnerabilities; but I cannot seem to have that happen automatically; when I attempt to do an automated scan; it scans the front door landing pages, it does not "see" any login forms. Need a way to actually crawl a massive website

Ben, PortSwigger Agent | Last updated: Oct 16, 2019 08:56AM UTC

Hi Joseph, Thank you for your message. You need to configure the website login credentials within the Application login section of the New scan window. Once this has been configured Burp will automatically use these credentials on any login forms that it discovers. Please let us know if you need any further assistance.

You need to Log in to post a reply. Or register here, for free.