Bug Reports - Page 115 - Burp Suite User Forum

Why you removed milliseconds in the response of repeater?

I used the milliseconds to check a lot of vulnerabilities for time like blind sql injection, blind user enumeration, etc But now, this feature was removed, i want it back! haha Thanks As you can see in this old...

Reapeter tab response time

the response time in reapeter tab has disappeared

Multi step Stored XSS and Stored SQLI

For my research on blackbox scanners efficiency testing, I configured scans using burpsuite professional version for known vulnerable web application Wackopicko and my own custom test bed with one stored XSS and SQLI...

JSON prettifier breaks cookie formatting

Hello, When the new JSON beautifier (2020.4) is enabled in the request editor, the cookie header is displayed on a single line, requiring horizontal scrolling. With previous versions and when the beautifier is disabled,...

Help please

Здравствуйте, я не могу запустить новую версию Бюрпа, выдает ошибку: A JNI error has occurred, please check your installation and try again. Вот скриншот: https://gyazo.com/dcd9f05a4520c0fff34aa317bd5bc622 И после нее...

I can't start new version Burp.

Hello, I can not start a new version of Burp, it gives an error: A JNI error has occurred, please check your installation and try again. Here is a screenshot: https://gyazo.com/dcd9f05a4520c0fff34aa317bd5bc622 And after it,...

Look and feel changes dramatically between Java 8 and Java 13

Hey, with the latest release you discontinued support for Java 8. However, the look and feel of Burp in Java 13 is really different and not nice to work with. Did you notice any differences during your testing?

Comparer "Sync views"

The "Sync views" button on Comparer isn't enabled by default. We all know that we all check this box if we have to compare large pages. Also if we have to manual compare hundreds of pages it isn't efficient to check this box...

Intruder: useless popup

While attacking with Intruder, most of the times we need to change the threads, check the Grep-Match box or many other things in the Options tab. When we do this on the live attack the below annoying popup window...

Cannot see crawler responses

While crawling, "Session handling tracer" shows the requests but it shows empty responses. I want to be able to see the responses.

Burp won't start on my OSX machine any more

Hi folks, Finding this one a little tricky to solve. Burp stopped working on my OSX system recently. I run it from the command line with something like: java -Xmx1024m -jar burpsuite_pro_v1.6.18.jar I get the...

Cannot login on another computer

Hello, like on subject, can't login on my account on another computer. I Didn't see any restrictions to login on another systems, can you help? Thank you,

Extension Errors

I found a strange bug. Sometimes the stderror location of my extension in the "Errors" tab ("Extender" -> "Extensions") suddenly changes his value, from "Shown in UI" to "Output to system console". This behaviors can hidden...

Unable to save project

[Burp Pro v2.0.04beta]Hello! While I'm trying to save project file I am getting following error: "Unable to save project data to the file /../../../../projectname.burp: null" I don't know how to see the full error trace. I'm...

No Response

I send Request many times but there was no response It is showing Waiting... Forever, What shoud I Do

NTLM Authentication doesn't work

Hey all, I have been trying for days to get NTLM authentication to work with Burp. I've tried multiple browsers and find that Burp will not proxy NTLM requests at all. When authenticating manually through the browser I...

Incomplete URL encoding

According to RFC3986 section 2.2, square brackets ('[',']') are reserved characters. Burp doesn't percent encode these characters when using the Ctrl+U hotkey, and one can observe Scanner payloads that don't have these...

false positive on RXSS?

i recently got the alert of reflected XSS with confidence certain because "vbscript:msgbox(19301293)" was injected inside a <a> tag, in the href part. I wasn't aware vbscript could be injected there. the thing is that,...

My progress is always 30%

Hi friends! I read all articles and mark them as "Completed" a month ago. However, after some updates, I found that my progress right now is 30% even after I mark new posts with the "Completed" checkbox. What I must do to...

Websockets not working with burp

my browser unable to connect *any* websocket while working with burp I also tried changing my browser. I'm getting this error on firefox (similar messages in other browsers): "Firefox can’t establish a connection to the...