Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

How to run multiple session while scanning application through Burp?

Sudhir Kumar Jan 12, 2015 10:39AM UTC

While the scanning the application through Burp, I found that if I use multiple threads it is resulting to session errors like (The requested session id appears to be invalid.You may have more than one Task Manager window/tab open)

but if I use single thread the scanning is too slow.

Can anyone explain me how to assign different session id's to different thread so that I can scan through multiple threads i.e if there is anyway I can tell to the threads which cookie to use from cookie jar.

Dafydd Stuttard Jan 12, 2015 10:58AM UTC Support Center agent

It sounds like the application is not willing to support multiple concurrent requests in the same session (for this particular function, at least).

Burp only currently has a single cookie jar, so you can’t do a scan with multiple threads using different cookie jars, sorry.

One possible solution would be to create an extension that handles sessions, and maintain your own separate cookie jars and use one per thread. Or you could run multiple instance of Burp, each running single threaded, and scan different parts of the application with each one.

Post Your public answer

Your name
Your email address