How do I?

If you've got a general question about using Burp Suite, then this is the best place to ask.

View all

Feature Requests

Burp's pretty great already, but could we make it even better? Let us know.

View all

Burp Extensions

If your query involves a Burp Suite extension (BApp), then this is the forum for you.

View all

Bug Reports

Found a bug in Burp Suite? This is the place to let us know. Our devs will thank you.

View all

Latest posts

Stealing OAuth access tokens via an open redirect lab

Is it possible to get invalid access tokens in the access log? I've been stuck on this lab for hours and got two access tokens, both rejected upon submission. Following the tutorial over and over, cannot figure out what I'm...

Activation Failed

Hi, i have burp professional on my laptop and i want to install it also on my desktop pc but when i try to activate burp, it says: "No more activations allowed for this license.". I read that one license can be used for...

Learning Paths not working.

I have been trying for several days to access the Academy but it always says that the page can't be found. The lab pages work fine but the learning paths are gone. Is there anyway to fix this? I found the learning paths...

HTTP Request Smuggler - Dashboard Items Not Working

Running Burp Pro 2024.3.1.4 and HTTP Request Smuggler v2.16 on MacOS 14.4.1 When I run a Smuggle Probe on a request, the findings appear in the Dashboard's Summary tab but they do not appear in the Issues tab. If I try...

Burp Intruder Bruteforcing too slowly

Hi, I see that Burp Intruder is bruteforcing at the rate of 1-5 seconds per request. This means that in a minute I can do roughly 12-60 requests. This seems to be way too slow, is there any way to speed up...

Lab - Exploiting Java deserialization with Apache Commons

Hi! I'm trying to solve this lab (Exploiting Java deserialization with Apache Commons) but i can't. First, i tried with ysoserial (like in the description of the lab is told) but when i send the request i get a 200 Ok...

API Scanning via Burp Suite Enterprise Cloud

Wondering about the API scanning abilities for Burp Suite Enterprise Cloud. I'm presuming these will be the same as what's found in the on-prem product. Is that correct? To be very specific... I see that sometime...

Low labs performance

I'm getting slow responses (up to 20 seconds delay) when working at least with CSRF labs (haven't tried other labs yet), examples are: Dec 07 11:20:18 MSK...

RE: Inquiry on Render Feature in Burp Repeater

In Burp Repeater, you can render the response returned from the server - does this mean that any JavaScript included in the response is also executed? Or is it only the HTML that's being rendered in order to get a visual...

All Labs very slow today

Hi, Are you having some issue today ? I've tried a lot of labs and each of them are incredibly slow to respond.

Burp Suite Support Center

Your source for help and advice on all things Burp-related.