Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Target scope: Include the URL only once for scan

satish | Last updated: May 21, 2015 08:12AM UTC

My website is sending below GET requests (REST style), abc.com/groups/1 abc.com/groups/2 abc.com/groups/3 ... abc.com/groups/23000 Now during an active scan, scanning one of the request is enough (saves time). Is there any way to set the scope to include the URL only once for scan? I tried the below config, but it did not work (all the URLs are excluded). Include scope: abc.com/groups/1 Exclude scope: abc.com/groups/*

PortSwigger Agent | Last updated: May 22, 2015 03:26PM UTC

When you send multiple items for scanning, Burp does offer the option to remove items with duplicated URLs. However, this is based on the full URL file path, and Burp does not know that part of that path is effectively a data parameter. I think in this situation, you will need to manually select just one of the items for scanning, or use the active scan wizard to manually remove the items that are duplicates, based on your knowledge of the URL scheme.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.