Bug Reports - Page 126 - Burp Suite User Forum

EXTERNAL SERVICE INTERACTION (DNS)

Hi Team, I am a facing below issue in my project, Please suggest the possible solution. Description: It is possible to induce the application to perform server-side DNS lookups of arbitrary domain names. The...

Burp (2.1.03) zerorised Content-Length in POST request

Hi, I noted that Burp v2.1.03 For example, I insert an additional Content-Length header with arbitrary number on a POST request, on the Intercept tab. (Note the POST request had an existing Content-Length: 0 header,...

Cannot load a specific font with "HTTP Display Message"

Cannot load a specific font with "User options -> Display -> HTTP Display Message". I use the following "Myrica M" font. https://myrica.estable.jp/myricamhistry/ When "Myrica M" included in this font is set to "Font"...

Burp Scanner stuck at 0%

Hi, I am having issues with the burp active scanner. I'm not sure if it is due to the application or not. Here are my symptoms, I start a scan, and the # of requests will build up. To around 20-30 requests. Then all of a...

a weired issue with capuring android https

i succeeded in intercepting all the android HTTPS traffic by installing burp certificate and it is working just fine . so the android traffic now is being monitored by Burp and every thing is in place , i can see all...

Crawl not finding items

I have a directory with a known file, e.g. https://website.com/folder/script.js. This appears as a grey item from the passive crawl in the Site Map under the Target tab, and the Response tab under Content is blank (because...

Trouble intercepting IOS app with new version

The new version of burp (v 2.1.03) have trouble intercepting IOS traffic. My IOS device and burp is configured properly but it still gives error "the client failed to negotiate an ssl connection". I used an older version (v...

Broken link in extender

the "install Jython" link in Extender is 404 across all Jthyon extensions. https://www.jython.org/downloads.html

error

--------------------------- Error --------------------------- You must be at least Poweruser to run this program. --------------------------- OK ---------------------------

Transparent proxy (invisible mode) doesn't work for OSX 10.14.6

Burp Invisible Proxy doesn't work for OSX 10.14.6 if the Application Firewall is turned on. To proxy HTTP requests from iOS device, I configured testing environment as follows: * I paired iOS device to MacBook via...

NTLM Authentication Issues in 1.7.33

Our Red Team discovered a bug in webapps that utilize NTLM authentication. The NTLM auth requests were not being properly sent from Burpsuite 1.7.33 and access was consistently denied with working credentials. Taking Burp...

crawl/URL's to Scan error

I'm having an issue (or is it a bug) whereby I have a website on a domain that has an underscore (for example, http://site_test.blah.com), but setting up a crawl scan type gives me 'Invalid URL to scan' error despite the...

Plugin's Java runnable processes keep running, even after fully removing the plugin.

Using Burp Suite v2.1.03, runnable Java processes (Java: ScheduledFuture) are not killed or interrupted, when stopping or even removing the plugin. Reproduction: 1. Install Logger++ from the BApp store. 2. Enter an...

Unable to take over parameter in macro

Hi I'm trying to run multiple requests after one. Request 1) Send a post request with fixed data. -> The result gives me a sessionid Request 2) Send a new post request with the previously received sessionid. I...

Custom crawl user-agent cannot contain colon (Burp 2.1.0.3)

I am setting up a custom crawler function, and tried to set-up a user-agent like this: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0 However, this does not succeed and gives the...

Chinese issue appears at issues view

myBurp issues view ?Add a Chinese issue appears, showing garbled characters? Plasese help me; Thanks ! this is my base64ed...

Very long crawl times

Hi, Since Burp 2.0 is out of beta I started using it today for a project I'm working on. While crawling a website, I noticed it took a very long time to crawl the website. So I decided to run a test on demo.testfire.net...

Burp Pro v2.1.03 Doesn't save a project

Hi, I have a company licence however my login no longer appears to work hence this post. I have been testing using a temporary project and would like to save my burp project however every time I attempt this I receive...

project file not saved

Burp 2.1.02 is not saving my project files. Latest case, I worked until 6PM yesterday then shut everything down. When boot up and open the Burp project file today, all of my afternoon work is gone. I have it configured to...

Unable to use Burp with latest version of Firefox

Hello, No matter what website I try to access, I get the "Invalid client request received" from Burp and then this error. It might be an issue with Firefox because it creates a request with GET...