Bug Reports - Page 131 - Burp Suite User Forum

Beta Crawler does not work

I attempt to crawl a webpage by giving the crawler the root of a website. However it does not find anything and says "1 locations crawled". I have tried different settings such as changing the crawl strategy to "Most...

Link manipulation and Open rediraction (DOM-based) - JQuery Mobile

Hi all, we use jquery.mobile-1.4.5.min.js in our application. Burp scan found a Link manipulation (DOM-based) and Open redirection (DOM-based) vulnerabilities in JQuery Mobile sources: Open redirection...

The JavaScript file 'jquery.mobile-1.4.5.min.js' includes a vulnerable version of the library

Hi all, We faced an issue from Burp Report: "Issue detail The library jquery-mobile version 1.4.5.min has known security issues. For more information, visit those...

Burp does not set SNI on the outgoing connection to an SSL enabled web server

Hi there, We run into the following situation the other day: We were testing an SSL enabled application and kept getting connection resets when accessing it via intercepting Burp and correct connections and...

embedded browser initialisation failed

Burp pro v 2.0.18beta java version "1.8.0_201" run as root: java -jar ./burpsuite_pro_v2.0.18beta.jar I do any request via burp proxy and try to render response. And got message "Embedded browser initialisation...

Burp Enterprise 500 Error with Logstash http_poller Plugin

Hi, Since I was thinking the Burp Enterprise API could be easily ingestible from Logstash I'm attempting to use HTTP_Poller plugin to ingest scan results into Elasticsearch. My script is basically what's recommended...

It's inpossible to work!

Hello Dear Burp Community, we are very upset, because we can't more work with BurpSuite, every time we start work on Windows 10 or on MacOS X after last 2 update, burpsuite freeze by self( We start 3 scans, burpsuite work,...

Burp Enterprise 500 Error with Logstash http_poller Plugin

Hi, Since I was thinking the Burp Enterprise API could be easily ingestible from Logstash I'm attempting to use HTTP_Poller plugin to ingest scan results into Elasticsearch. My script is basically what's recommended...

Graphical glitch when loading project

Hi, i would like to report a graphical glitch that sometimes happens when loading a project that takes some time to fully load. This doesn't happen all the time, i would say 1 every 15/20 runs, and i can't find a way to...

New extension-driven passive audit task being created automatically

I noticed that with v2.0.17beta, while performing an audit, for example "Audit coverage - Thorough", a new "Extension driven passive audit" task is created and started automatically without interaction and it mostly sit...

Connect abort software thrown

Hai , I receiving connection abort in alert tab while scanning all the target. I could not find the root cause of the issue. Please help me. I even downloaded new version but still not helpful to scan.

Unable to create projects on a network drive

Hello, Up just updated to the Burp Suite Professional v2.0.17beta and tried to create a new project located on a network drive. On the first attempt, it stated that the project was corrupt and needed to be repaired. I...

Burp suite submitting blank username and passwords when doing an authenticated crawl

Right now, I get locked out of my account because burp suite is trying to login with blank user names and passwords. I get locked out because it tried multiple times with the same IP. How can I see further into the issue...

Burp Professional 1.7.0.4 / Null Pointer Exception

java.lang.NullPointerException at java.util.Hashtable.put(Hashtable.java:459) at javax.swing.JEditorPane.registerEditorKitForContentType(JEditorPane.java:1247) at...

Blank Raw (Empty)

My Config ---------------------------- BurpSuite v1.7.35 - Community Edition Java 8 I'm using firefox and I tested with others navigators like chrome... My local access proxy ip is 127.0.0.1:8080(default) My Proxy is...

Burp 2.x does not passively scan certain content types it did in 1.7

In Burp 1.7.x Burp would find issues like 'Email address disclosed' on non-HTML content types. For example if the following was served in 'emails.txt' with Tomcat: test@gmail.com fake@gmail.com Burp 1.7.x would...

Maybe not a bug, xss reported by Burp

I came across an xss found by the scanner and reported as Certain. test74666'%3balert(1)%2f%2f901vivg94 I was not able to reproduce it manually until I put a ) between the ' and the ; -> %3b. I'm wondering why Burp...

report issue

How many Types of reports available in burp suite report..? and what are the possible test cases are present in the burp scanning report..?

Burp suite submitting blank username and passwords when doing an authenticated crawl

Right now, I get locked out of my account because burp suite is trying to login with blank user names and passwords. I get locked out because it tried multiple times with the same IP. How can I see further into the issue...

External Service Interaction - Bug Bounty?

I have found an external service interaction issue on a website that is listed in hacker one, I want to send a report, but, I'm not sure how to come up with a proof of concept to send to them. I have recently reported an...

Beta Crawler does not work

Link manipulation and Open rediraction (DOM-based) - JQuery Mobile

The JavaScript file 'jquery.mobile-1.4.5.min.js' includes a vulnerable version of the library

Burp does not set SNI on the outgoing connection to an SSL enabled web server

embedded browser initialisation failed

Burp Enterprise 500 Error with Logstash http_poller Plugin

It's inpossible to work!

Burp Enterprise 500 Error with Logstash http_poller Plugin

Graphical glitch when loading project

New extension-driven passive audit task being created automatically

Connect abort software thrown

Unable to create projects on a network drive

Burp suite submitting blank username and passwords when doing an authenticated crawl

Burp Professional 1.7.0.4 / Null Pointer Exception

Blank Raw (Empty)

Burp 2.x does not passively scan certain content types it did in 1.7

Maybe not a bug, xss reported by Burp

report issue

Burp suite submitting blank username and passwords when doing an authenticated crawl

External Service Interaction - Bug Bounty?

Burp Suite Support Center