Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Throttle requests in Burp Enterprise

Chandraveer Kumar Dec 04, 2018 06:08AM UTC

Is there any provision for throttling requests in scanning a site. in essence, how to control threads in case of scanning?


Paul Johnston Dec 04, 2018 11:08AM UTC Support Center agent

Yes, this is supported by the Resource Pool feature. When setting up a scan you can configure the resource pool to have a maximum number of concurrent requests, and an optional delay between requests.

(I’m assuming you’re using Burp 2. On Burp 1 the options are also present, but in a different place)


Chandraveer Kumar Dec 04, 2018 11:20AM UTC
I'm using Burp Suite Enterpries Edition.
How can I control the requests in the same?

Paul Johnston Dec 04, 2018 11:59AM UTC Support Center agent

Hi Chandraveer,

Unfortunately, resource pools are not currently configurable with Enterprise. This is on the development plan though.

Please let us know if you need any further assistance.


Chandraveer Kumar Dec 07, 2018 07:28AM UTC
Hey Paul,

There are a number of features those are missing in Burp ENT beta version, such as exporting a report from, the progress of scanning in percentage, thread control mechanism, advanced and essential manual tools, and many more.

Can we get a list of the features those are in the development plan?

Chandraveer Kumar Dec 10, 2018 06:09AM UTC
Hi,
I am waiting for the reply.

Paul Johnston Dec 10, 2018 09:02AM UTC Support Center agent

Hi Chandraveer,

Thanks for following up. Many of the things you mention – such as manual tools – will remain the preserve of Burp Pro and will not be included in Enterprise. The idea is that Enterprise is designed for developers, while Pro is designed for security testers.

There is an outline of the road map in the initial announcement:

- https://portswigger.net/blog/burp-suite-enterprise-edition-beta-now-available

Please let us know if you need any further assistance.


Jacek Jan 17, 2019 04:48PM UTC
Hi -- did anything change with the requests Throttling in Burp Enterprise meanwhile? In version 2.0.13beta I see "resource_pool" String option in the API v0.1. What are the valid inputs of that field?

Paul Johnston Jan 18, 2019 04:21PM UTC Support Center agent

Jacek – we’ve not changed throttling recently. The resource_pool can be used on Burp Pro, and set to any resource pool you’ve created. It’s not currently possible to create a resource pool in Burp Enterprise.


Liam Tai-Hogan Mar 14, 2019 02:06PM UTC Support Center agent

We’ve added scanning progress bars and estimated time remaining to Sites tree in the latest release of Burp Enterprise (1.0.14beta).


Liam Tai-Hogan May 21, 2019 09:25AM UTC Support Center agent

The latest release of Burp Enterprise includes an HTML Scan summary report, downloadable from the Scan results page. The report lists issues grouped by host and then issue type. For each issue the issue type, path, severity and confidence are included. There is an option to include or exclude any issues that are marked as false positive.

Please let us know what, if any, additional information would be useful or is needed in this report.


Post Your public answer

Your name
Your email address
Answer