Bug Reports - Page 125 - Burp Suite User Forum

regarding payloads and render

in render iam getting embedded browser initialization failed and in payloads iam getting always no payloads when i enter value ..so please send a best version of burp suite link for windows 10 32bit pc free version

Vulnerable Java JRE

Hi The newest version of the community edition for Linux is shipped with a private JRE (Oracle 1.11.0 2) which is effected by multiple vulnerabilities, can this be updated to 1.11.0 3? Thanks Br, Dransfeldt

Burp Enterprise - Dropdowns auto-collapsing after ~10 seconds

In Burp Enterprise, information is-auto-collapsing ONLY when I go to scan results through the following workflow: Sites >> (select any site) >> Issues >>(select any specific issue) >> expand dropdowns >> Wait Ten Seconds,...

Web academy

Hello, i think there is an error in Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft....

Freezes in scanner

Hi I've have problems running the scanner in 1.6.09, it's very unreliable. It just stopps scanning for no obvious reason, but it is a least not frozen. I can then save the state, kill Burp and reload the state. The...

Missed RFI

Hi, testing again on zero.webappsecurity.com Burp ( 2.1.04 ) is missing the remote file inclusion at /help.html eg: http://zero.webappsecurity.com/help.html?topic=https://www.google.com

Clickjacking with buster script bypass

Following lab is bugged: https://portswigger.net/web-security/clickjacking/lab-frame-buster-script Robot-victim does not click exploit iframe, even if it was copied and set correctly (I was using Google Chrome as...

Burp 2.x Audit finds less issues

I‘m playing a bit with burp 1.7.37 and v2.1.04 (both pro versions). I also read about the new scanning techniques burp 2.x comes with. So my expectation was, that it should find (in minimum) as much issues as the „old“ one....

Unable to activate license after reinstalling Burp Enterprise

After a server crash we had to reinstall our Burp Enterprise setup. I downloaded the license again from our account page and tried to install it through the /settings/licensing upload field. Unfortuinately I get the...

Connection reset error

I face Connection Reset error while opening a testing website that I've got. The website works properly when burp proxy is not set, and when the burp proxy is set in Mozzila or Chrome it gives Connection Reset Error.

302 Redirect Not Picking Up Cookies

Hello, I am using burp v1.7.31. This is about redirection 302 response code in burp. I am not getting "Follow Redirection" option in burp repeater while testing a particular application. The repeater options are set as...

Use of multiple URL's with plugin: Burp Scan

Hello Team, We are using Jenkins for Continuous Integration of Burp Enterprise. We are using 'Burp Scan' plugin in the Build section of Jenkins Freestyle Project job creation. When scanning the web application in Burp...

Reproducing External Service Interaction (DNS) issue

Hi all, I am having a problem recreating an external service interaction (DNS) via the scanner. When I run a scan to the site the first time (crawl and audit) it finds the issue. If a run the scan a second time it does...

Polling server connection fails on private collaborator instance

Hi there, I have setup a private collaborator server with let's encrypt wildcard certificates. It works fine, except that I can only pull over unencrypted HTTP. This is very strange, as I do not have a "polling" section...

POST with gzip data can't parse insertion points correctly

If post with gzip data(maybe other binary data format either) will cause burp extender can't parse insertion points correctly, when you print insertionPoint.getInsertionPointType(), it will always print 1. And the...

Burp Professional 1.7.0.4 Crash (01)

java.lang.ClassCastException: javax.swing.plaf.nimbus.DerivedColor$UIResource cannot be cast to javax.swing.Painter at javax.swing.plaf.nimbus.NimbusStyle.getBackgroundPainter(NimbusStyle.java:708) at...

Sometimes a complete freeze may happen when editing and issuing a request in the repeater

I'm not sure what is causing this, but sometimes when editing a request in the repeater and possibly removing the last CRLF characters by keeping pressed the CANC key, after issuing the request all the windows will freeze...

More Burp 2 Beta API Key Issues

When "Allow access without API key" is enabled if an invalid API key is used the API does not return an "Unauthorized" error message or the proper HTTP status code. For example if a valid API key is "valid" and the API...

GUI performance slow to abyssmal under some (unclear) circumstance on start-up

I have BurpSuitePro v2.1.03 on Debian Buster using KDE. It has generally worked as expected. I ran a scan of a copy of TeamCity. This generated ~250,000 requests overnight. Now each time I open the project file...

URL's not showing in target list

I am having an weird issue I have not seen before. For some reason some pages I explore are not getting listed in the target list. I can send the page to repeater and intruder just fine, but when I expand the site on the...