Burp Sequencer live capture - Port Swigger
Summary: PortSwigger's documentation describes Burp Sequencer's live capture feature, which repeatedly issues a request and extracts the relevant token from the application's responses in a new results window. The results window shows a progress bar and real-time capture details, and the copied or saved tokens can be used as payloads for Burp Intruder or Burp Scanner or loaded into a future Sequencer analysis.
Why it matters: Token randomness is the only thing standing between a predictable session identifier and an attacker who can guess it, and this tool exists specifically to test whether your application's tokens hold up.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026