How do I?

If you've got a general question about using Burp Suite, then this is the best place to ask.

Create new post

View all

Feature Requests

Burp's pretty great already, but could we make it even better? Let us know.

Create new post

View all

Burp Extensions

If your query involves a Burp Suite extension (BApp), then this is the forum for you.

Create new post

View all

Bug Reports

Found a bug in Burp Suite? This is the place to let us know. Our devs will thank you.

Create new post

View all

Latest posts

Burp Pro license

Hi there team, i purchased the Pro License of Burp via Bank Transfer but still didn't get any email,i would appreciate your support. best regards.

Result of Exam

Hello Team, After we attempt the exam and fail, will it be stored on the account to see at any time the result of the attempted test?

SAML auto provisioning feature

Is there a plan to add SAML auto-provisioning option for Burp Enterprise SAML integration?

Domain with underscore gives error

I am trying to perform some tests on a website which domain name contains the underscore character '_' , the browser throws a 'ERR_SSL_PROTOCOL_ERROR', it doesn't even intercept requests made to the website and the only...

Burp Extension

Hi! I am trying to write a burp extension but the thing is a already done what i need to do in processHttpMessage . But then i wanted to add a IcontextMenuInvocation. I added but now when i try to call processHttpMessage it...

I'd like a refund on my burp pro licence

I would like a refund on my burp pro licence due to personal financial circumstances. I plan to to re-buy the pro license in the future to do the burp certification. There are no issues with the software.

for clearing doubts regarding paragraph in CORS article https://portswigger.net/web-security/cors

Intranets and CORS without credentials Most CORS attacks rely on the presence of the response header: Access-Control-Allow-Credentials: true "Without that header, the victim user's browser will refuse to send their...

SQLi lab - Blind SQL injection with conditional errors problem

Hello, I am tring to solve this lab. I notice that the solution using this pattern to check vulnerbility. TrackingId=xyz'||(SELECT '' FROM dual)||' I am confuse with concatenation symbol "||" ,why need to use...

Query regarding the Exam

Hello, I was wondering, for the first step in the exam we are supposed to get the details of a user right. Will it always be the user "carlos" or can it be anyone?

No Raw in Response when using Repeater

I copied my proxy intercept and pasted it in Repeater tab’s Raw. Then click GO (filled host&port), nothing is appeared in Response window. How can i do for see the response raw? (I’m doing webgoat missing function level...

Burp Suite Support Center

Your source for help and advice on all things Burp-related.