Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Disabled agent can scan sites!

Chandraveer Kumar Nov 29, 2018 06:46AM UTC

I am evaluating Burp Enterprise. From the Agents tab, I disabled one of my agents. Keeping a site on scan, I observed that the site was being scanned on that disabled agent. How is this possible?

Liam Tai-Hogan Nov 29, 2018 10:36AM UTC Support Center agent

Chandraveer, how did you disable the agent? How did you observe that it is still active?

Chandraveer Kumar Nov 29, 2018 10:44AM UTC
I disabled agent from 'Agents' tab in the top right corner. There is a switch for Enable/Disable aligned with each agents. Just turned off that switch and agent got diabled.

I put a site for scan; clicked on it; in the scan detail, I found that disbled agent in 'Agent:' section.

Liam Tai-Hogan Nov 29, 2018 10:57AM UTC Support Center agent

We’re unable to reproduce this in our testing. The agent should remain in the Agents section but should be “grayed out”.

Are you able to reproduce the behavior consistently?

Chandraveer Kumar Nov 29, 2018 01:33PM UTC
I am unable to reprdouce now the same issue.
What I observed was- After a site goes for scan via an agent, if you disable/grey out the agent, the scan doesn't stop once it catches an agent.

Liam Tai-Hogan Nov 29, 2018 01:37PM UTC Support Center agent

We’ll continue testing. Let us know what the steps are if you manage to reproduce.

Post Your public answer

Your name
Your email address