Bug Reports - Burp Suite User Forum

There's something wrong with lab "Targeted web cache poisoning using an unknown header"

Hello, Multiple times I've tried to complete this but it breaks. Sometimes when I try to open this lab, I get a 504 error saying no response. When I do get in, when I get to the step to add "X-Host: example.com", when I...

CSRF Labs Broken?

Hi, Is it possible the CSRF labs are broken? I have attempted the following: - https://portswigger.net/web-security/csrf/lab-no-defenses -...

Burp browser is crashing

Hi Team, I am using burp professional version 2024.5.5 and the browser is continuously crashing. Could you please help me here. Thanks

All Labs very slow today

Hi, Are you having some issue today ? I've tried a lot of labs and each of them are incredibly slow to respond.

solved labs status not updated

hello , I have been using your website in the last few months and i haven't encountered a similar problem until the past couple of weeks .When I solve a lab , it takes a long period of time to update the status to "lab...

No more activations allowed for this license

Unfortunately I have had to reinstall my machine and now when I try to install burp suite, I get the error "No more activations allowed for this license" How can i fix it? licensed to talos

Faulty Lab: "CORS vulnerability with trusted insecure protocols"

Hi, maybe there is bug inside the laboratory "CORS vulnerability with trusted insecure protocols". The following exploit script works with Burp's Chrome: <script> document.location =...

OAuth account hijacking via redirect_uri

I am working on the following lab: https://portswigger.net/web-security/oauth/lab-oauth-account-hijacking-via-redirect-uri I have followed the solution instructions. PoC: <iframe...

Issues on the proposed solution to Lab: OAuth account hijacking via redirect_uri

We tried to solve https://portswigger.net/web-security/oauth/lab-oauth-account-hijacking-via-redirect-uri using the proposed solution. In particular, to steal the authorization code, such solution specifies to have the...

Lab: OAuth account hijacking via redirect_uri: SessionNotFound

Hi, In the lab titled "Lab: OAuth account hijacking via redirect_uri", I am unable to view the exploit when using the iframe payload on the exploit server. Instead, I get the error below inside the...

Labs: Web cache poisoning not solved

I can successfully exploit myself but non of the labs get marked as solved. I've tried the first three web cache poisoning labs.

Lab: Exploiting cross-site scripting to capture passwords problems

Hi, The provided solution will trigger DNS requests that my collaborator sees. However, the lab will not trigger the HTTP request. I have confirmed that the collaborator will see http requests when I test the collaborator...

CSRF lab issues

Seems like there are some issues with the CSRF labs. I've tried using a variety of solutions for most of the day now and none of them seem to be working (or the first five I've tried anyway). The exploit server simply goes...

I am getting the below Java Stackoverflow error when running the latest Burp Proxy jar file with OpwnJDK 20.0.1 and 20.0.2, with or without extensions

C:\Software\Sectools\Appsec>c:\openjdk-22.0.2\bin\java -Xmx24576M -jar burpsuite_pro_v2024.6.3.jar java.lang.StackOverflowError at java.desktop/javax.swing.text.View.getViewFactory(View.java:1028) at...

There's something wrong with lab "Targeted web cache poisoning using an unknown header"

CSRF Labs Broken?

Burp browser is crashing

All Labs very slow today

solved labs status not updated

No more activations allowed for this license

Faulty Lab: "CORS vulnerability with trusted insecure protocols"

OAuth account hijacking via redirect_uri

Issues on the proposed solution to Lab: OAuth account hijacking via redirect_uri

Lab: OAuth account hijacking via redirect_uri: SessionNotFound

Labs: Web cache poisoning not solved

Lab: Exploiting cross-site scripting to capture passwords problems

CSRF lab issues

I am getting the below Java Stackoverflow error when running the latest Burp Proxy jar file with OpwnJDK 20.0.1 and 20.0.2, with or without extensions

Network error on websites login with burp proxy on

Repeater's "Request" section is narrow when Burp Suite starts

Availability- The website is too slow now a days

SameSite Lax bypass via method override Lab Broken

BSCP certification results mail

solved lab is showing not solved

Burp Suite Support Center