Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How to run multiple session while scanning application through Burp?

Sudhir | Last updated: Jan 12, 2015 10:39AM UTC

While the scanning the application through Burp, I found that if I use multiple threads it is resulting to session errors like (The requested session id appears to be invalid.You may have more than one Task Manager window/tab open) but if I use single thread the scanning is too slow. Can anyone explain me how to assign different session id's to different thread so that I can scan through multiple threads i.e if there is anyway I can tell to the threads which cookie to use from cookie jar.

PortSwigger Agent | Last updated: Jan 12, 2015 10:52AM UTC

It sounds like the application is not willing to support multiple concurrent requests in the same session (for this particular function, at least). Burp only currently has a single cookie jar, so you can't do a scan with multiple threads using different cookie jars, sorry. One possible solution would be to create an extension that handles sessions, and maintain your own separate cookie jars and use one per thread. Or you could run multiple instance of Burp, each running single threaded, and scan different parts of the application with each one.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.