Bug Reports - Page 101 - Burp Suite User Forum

Version 2020.4 is giving JNI errors

Newest version of Burp 2020.4 is throwing JNI errors (Error: A JNI error has occurred, please check your installation and try again). I am running the .jar file. java -version java version "1.8.0_251" Java(TM) SE...

burp suite won't start at all with java 10

java version "10.0.1" 2018-04-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.1+10) Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10.0.1+10, mixed mode) ///////////////// WARNING: An illegal reflective access...

Burp Enterprise: Failed to upload license after update (2020.4)

After the automatic update, my license stopped working. When you add a license, the following message appears: Warning Failed to upload license: No more activations allowed for this license I have Ubuntu Server...

New license key needed after update

Hello support, Today I wanted to update de Enterprise server to 2020.4, but unfortunately I couldn’t use the old license key. Probably it’s because of the reinstallations that we have to carry out in order to solve a...

"Send to Decoder" (from Repeater) silently cuts the data to the first 10000 bytes

Sending a view state from repeater to decoder copied only the first 10000 bytes. (Ideally there would be less need in decoding once BURP hides the URL encoding of parameters from the manual input).

Cannot scan over 20 sites

Consider this: 50 sites on Target->Sitemap. Select all the sites, right-click -> scan -> "open scan launcher". The "URLs to scan" is empty. In order to encounter that I go back to sitemap, select all the sites, "copy...

DOM Based XSS

Hi Team, I Have Found the DOM Based XSS using Brupsuite but I am how can exploit the vulnerability. This is what I got, The application may be vulnerable to DOM-based cross-site scripting. Data is read from...

Client certificate authentication results in Received fatal alert: decrypt_error

I'm currently testing a web application that relies on client certificates for the authentication. I'm suspecting that they rely on the Common Name of in the client cert, to assign roles to the authenticating user. I've...

Black UI when starting Burp

Hello, I am running burp on Kali. Today (I am not sure if it was due to an update or not) it began starting with a black UI. I've tried setting Java versions to both 8 & 11, uninstalling both versions, turning off...

Why you removed milliseconds in the response of repeater?

I used the milliseconds to check a lot of vulnerabilities for time like blind sql injection, blind user enumeration, etc But now, this feature was removed, i want it back! haha Thanks As you can see in this old...

Reapeter tab response time

the response time in reapeter tab has disappeared

Multi step Stored XSS and Stored SQLI

For my research on blackbox scanners efficiency testing, I configured scans using burpsuite professional version for known vulnerable web application Wackopicko and my own custom test bed with one stored XSS and SQLI...

JSON prettifier breaks cookie formatting

Hello, When the new JSON beautifier (2020.4) is enabled in the request editor, the cookie header is displayed on a single line, requiring horizontal scrolling. With previous versions and when the beautifier is disabled,...

I can't start new version Burp.

Hello, I can not start a new version of Burp, it gives an error: A JNI error has occurred, please check your installation and try again. Here is a screenshot: https://gyazo.com/dcd9f05a4520c0fff34aa317bd5bc622 And after it,...

Help please

Здравствуйте, я не могу запустить новую версию Бюрпа, выдает ошибку: A JNI error has occurred, please check your installation and try again. Вот скриншот: https://gyazo.com/dcd9f05a4520c0fff34aa317bd5bc622 И после нее...

Look and feel changes dramatically between Java 8 and Java 13

Hey, with the latest release you discontinued support for Java 8. However, the look and feel of Burp in Java 13 is really different and not nice to work with. Did you notice any differences during your testing?

Comparer "Sync views"

The "Sync views" button on Comparer isn't enabled by default. We all know that we all check this box if we have to compare large pages. Also if we have to manual compare hundreds of pages it isn't efficient to check this box...

Intruder: useless popup

While attacking with Intruder, most of the times we need to change the threads, check the Grep-Match box or many other things in the Options tab. When we do this on the live attack the below annoying popup window...

Cannot see crawler responses

While crawling, "Session handling tracer" shows the requests but it shows empty responses. I want to be able to see the responses.

Burp won't start on my OSX machine any more

Hi folks, Finding this one a little tricky to solve. Burp stopped working on my OSX system recently. I run it from the command line with something like: java -Xmx1024m -jar burpsuite_pro_v1.6.18.jar I get the...