Troubleshooting recorded login sequences - Port Swigger

Summary: PortSwigger's documentation states that Burp Scanner is sometimes unable to replay a recorded login sequence during a scan, which does not fail the scan but prevents an authenticated crawl. It lists troubleshooting steps including checking the scan's event log for errors, running a browser health check, using the Replay function to confirm the sequence ends on the expected page, and re-recording the login to see if it fails at the same stage.
Key Takeaway: A login sequence that silently fails to replay leaves the scanner crawling unauthenticated, so the parts of the application behind the login go untested while the scan still reports as complete.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026