Bug Reports - Page 133 - Burp Suite User Forum

Extender Tab "Select File ..." button does NOT open File Explorer on Windows

I have burp suite professional installed on a windows 10 machine and when I go to the extender tab and the go to the options menu and try to select a jython jar file nothing happens when clicking the "Select file ..."...

Random "out-of-band resouce load" nofifications

Not sure if this is a bug, but its the best fitting topic. I am running BURP scans using the Custom Parameter Handler extentions to handle bearer token authentication. Now whe i scan mys site, I get random "out-of-band...

Recovery of Burp project file

Hi, I am using Burp on Windows7. I came across an issue where active scan was in progress and the OS went down. I saved the project once when half of the scan was completed. After restart the machine, the Burp is not able...

Bodyless response delayed ~10sec before forwarding the header

Whilst conducting some testing I noticed that for a bodyless response like a 302 (that as per spec does not have a content-length/chunked header) the proxy waits ~10sec before forwarding the header, and when it is forwarded...

Error "No response received from remote server." yields status 200

Situation: - configured upstream proxy - proxy is not reachable (not connected to the network) - request arbitrary website (firefox, burp as proxy) - Burp responds with `Error No response received from remote...

Target Scope (Basic Config) Exclude From Scope Ignored During Active Scan

Tested on Burp v1.7.32 (cannot update right now from this testing machine) How to Reproduce: 1) Visit a website e.g. http://www.example.com 2) Add the root in scope. "Include In Scope" will show [X]...

V1.7.17 and v1.7.16 Issues in Target Tab

When you run active scan and look at the scan queue, 2 issues found and I come back to the target tab and click on the target and don't see any issues listed in the issues box. In the previous versions this wasn't a...

add-a-request suppress all my macros

Hello, When using add-a-request all my macros are removed. This is using Burp 1.7.34 (we downgraded because of the macro issue on 1.7.35), there are no stdout or stderr of the add-a-request extension. Running on...

BApp Store and Collaborator HTTPS stopped working with 1.7.34

When using Burp internally on our corporate network, I am not longer able to update the BApp Store or use the Burp Collaborator features over our BlueCoat proxy when using version 1.7.34. When I downgrade to 1.7.33 or go...

Burp Suite Pro ignoring BurpSuitePro.vmoptions

Hi Burp experts. Just recently I noticed that Burp is ignoring certain (or maybe all) JVM parameters inside the BurpSuitePro.vmoptions file. I'm usually working in a proxied environment. In order to download/install...

Burp not scanning json properly

Hi i'm testing a an application who send his data in json format but scanner from burp is not testing correctly... all payloads send from scanner are place it outside the json post. Ex: {"test":"somedata"}' and...

OS X config loader 'Default to the above in future' does not stick

When I load Burp in OS X, I have to click through the project wizard and the config loader screens every time. In the config loader screen, the default is 'Use Burp defaults' then there's a checkbox 'Default to the above...

Missing information in export of Burp Suite Scanner issues

Hi, I found an issue in the export functionality of Burp Suite Scanner. In detail, the XML export of the issues obtained using the "Actively scan defined insertion points" functionality of the Intruder tool have the...

BScope.Adware.Spigot & Downloader.Banload.Win32.85513 virus reported

Hi, I downloaded burpsuite_community_windows-x86_v1_7_34.exe version today and was worried that Virustotal flags this program with 2 possible virus/adware. Any explanation on why Virustotal thinks that the program is...

Burp Crashes Canceling Scans / Deleting Results / ETC

Hello, I have noticed that burp will become unresponsive when canceling a large amount of scans, deleting large amount of information from targets, or deselecting all Scan Issues in scanner options. By large amount, I...

Allow editing Automatic Project Backup settings while a temporary project is open

This feature should be restricted by licence, not by the type of project that's currently open. If that model is continued, however, the settings should be applicable at the project level, not globally.

Sending items to intruder breaks known behaviour

When you send a new item to repeater in burp suite a new tab is created and the content from the old one is preserved. This is especially useful since it allows you to keep a history of actions. The same cannot be said for...

Making posts

When I create some ticket in web GUI = Public post, for a couple of months now I'm taken to the 2nd step, but the Topic automatically changes as well as the subject, which includes message. I'll try to upload screenshot for...

2 requests with the same URL but different HTTP methods are not getting added to the Site Map

Suppose, we have a GET request and a PUT request with the exact same URL. GET https://test.com/xyz PUT https://test.com/xyz Only one of them( the one that is intercepted/invoked last) gets added to the...

input suggestion boxes not being destroyed

Occasionally, an input suggestion box is not destroyed if an item is not selected from it. It then stays on screen on a higher layer than the window that created it, if this is the main Burp window then it gets quite...