How do I?

If you've got a general question about using Burp Suite, then this is the best place to ask.

Create new post

View all

Feature Requests

Burp's pretty great already, but could we make it even better? Let us know.

Create new post

View all

Burp Extensions

If your query involves a Burp Suite extension (BApp), then this is the forum for you.

Create new post

View all

Bug Reports

Found a bug in Burp Suite? This is the place to let us know. Our devs will thank you.

Create new post

View all

Latest posts

Decode encoded data in request data

when i do an intercept and check the http history it showing like this, the request body is so weird, i have tried to figure out how to decrypt this but i have nothing, i want to know what encrypt is this, and how can i...

Issue Discovery - URIs with creds

Could an auto-detect rule be added to detect creds in URI strings? A naive but performant rule could be: \b((?<proto>\w+)://(?<userpass>\w+:\w+)@(?<domainPath>[\w\.:/]+) or...

Issue with "Reflected XSS protected by very strict CSP, with dangling markup attack" lab

I hope this message finds you well. I wanted to bring to your attention an issue I encountered while working on the "Reflected XSS protected by very strict CSP, with dangling markup attack" lab. It seems that due to a recent...

Burp Suite Community Edition v2023.10.3.5 will not update itself

I have Burp Suite Community Edition v2023.10.3.5 and when I manually checked for updates I saw the following: An update is available. Version: Burp Suite Community Edition 2023.10.3.6 However, when I clicked on the...

Activation Failed

Dear support, I removed my burp suite pro and then i reinstalled, but now I have the follow error: Activation Failed No more activations allowed for this license. I have this license just on 1 computer, What I can do...

Rest API Internal Server Error

After a system reboot, the REST API suddenly stopped working. I'm using Burp Enterprise. I can still start scans via the GUI, but all the API calls that used to work result in a 500 Internal Server error. Also, when I go...

Bambda to filter out OPTIONS requests

Hi all! Just wondering if anyone has created a Bambda for filtering out requests with the OPTIONS method that are muddying up my Burp History. I've look at the functions available and can't for the life of me figure out...

BChecks - How to append something to each query parameter?

Hi, I want to create a BCheck that appends something to each query parameter and checks if the response differs from the base response: metadata: language: v2-beta name: "Basic SQLi Checker" run for...

Platform Authentication settings: allow multiple entries with same host

For the moment only one Platform authentication entry is allowed per destination host. If the user tries to set up a second entry that has the same destination host, Burp will not allow it. However, it is useful during...

Organizer

In my opinion, the organizer is missing its most important function - organizing. If I want to remember different requests for later in my workflow, I divide them into different categories or put them into groups in the...

Burp Suite Support Center

Your source for help and advice on all things Burp-related.