Determining the session timeout using Burp Suite
When a user doesn't use an application for a certain amount of time, most applications will automatically log out the user and destroy their session. To determine how long it takes for a session to timeout, you can use Burp Intruder to issue the same request multiple times with increasing delays. Learn more at:
https://portswigger.net/burp/document...