---
id: 397
title: "Automatic session handling"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/automatic-session-handling"
published_at: "2018-08-03T18:04:00Z"
tags: ["burp-suite", "crawler", "session-handling", "mobp", "csrf", "cookies"]
phying_url: "https://phying.com/item/397"
lang: en
---

# Automatic session handling

## Summary

Burp's new crawler handles sessions automatically: parallel agents keep their own cookie jars, and requests are constructed dynamically from responses so CSRF tokens need no configuration.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2018-08-03T18:04:00Z
- **Original:** https://portswigger.net/blog/automatic-session-handling
- **Phying News:** https://phying.com/item/397