Bug Reports - Page 138 - Burp Suite User Forum

Sending items to intruder breaks known behaviour

When you send a new item to repeater in burp suite a new tab is created and the content from the old one is preserved. This is especially useful since it allows you to keep a history of actions. The same cannot be said for...

Making posts

When I create some ticket in web GUI = Public post, for a couple of months now I'm taken to the 2nd step, but the Topic automatically changes as well as the subject, which includes message. I'll try to upload screenshot for...

2 requests with the same URL but different HTTP methods are not getting added to the Site Map

Suppose, we have a GET request and a PUT request with the exact same URL. GET https://test.com/xyz PUT https://test.com/xyz Only one of them( the one that is intercepted/invoked last) gets added to the...

input suggestion boxes not being destroyed

Occasionally, an input suggestion box is not destroyed if an item is not selected from it. It then stays on screen on a higher layer than the window that created it, if this is the main Burp window then it gets quite...

Slow Website Loading and App Content Loading in iOS Device with Proxy Configured

Hi, I'm using an iMac with the Proxy Listener set up and have set it up correctly on my iOS device. I can see some of the http history appearing in the listener when websites are browsed in the browser, although it is slower...

Inconsistent Site Map behaviour / missing requests

Our Burp Suite (latest professional, default settings, no extensions) "Site map" shows an inconsistent behavior for displaying or hiding requests (without filter, i.e. "Showing all items"). According to the documentation...

Burp collaborator issue when using upstream proxy

Dear Sir, I saw that the burp collaborator support upstream proxy during the healt check, in my current setup the health check is fully green. Using our collaborator server. But the in the alert window I continue to...

Scope exclude requires include

It seems that the In-Scope defining doesn't allow defining scope using only rules that exclude addresses. A way to circumvent this seems to be to make a single include rule for IP-address range 0.0.0.0/0.

discovery scan regards "301 moved permanently" as a success

I've tried using the "discovery" feature but tend to find it's not particularly useful because of its tendency to regard common methods of redirecting to login forms as a "success", meaning it fills the site map with false...

test

HTML formatter indents incorrectly

The formatter thinks "<base>" need a close tag, but actually "base" is an empty element, as explained in https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base clearly. Everything under "<base>" should not have...

Scanner Cookies Error

Hi, I'm using Burp Professional 1.7.33. MacOS ver. Burp suite logged the first cookies for Scanner. I logout from website and I sign in with different membership. After I'm using Scanner. But cookies not true, because...

Does Burp try to send unsent files.

A server team is reporting that it is still receiving attack strings and file upload attacks from my scan even though I stopped scanning more than one week ago. Is it possible that Burp (or my OS) is still trying to send...

Cross domain script inclusion is not very reliable

The scanner plugin for cross domain script inclusion is not very reliable - it always shows not nearly all cross domain scripts that are included. For example, if there's a script block on a page that injects another script...

Burp Suite has reported about use of Permanent or persistent cookies on client machine.

Burp Suite has reported about use of Permanent or persistent cookies on client machine. Should we stop using them? What are the alternatives available?

software-caused-connection-abort-recv-failed

Hi Team, I get this error message while running Burp Suite spider & scanner against multiple post request using asp.x application which are using xrftoken or key in body content : java.net.SocketException: Software...

What is Private IP addresses disclosed reported by Burp Suite.

What is Private IP addresses disclosed reported by Burp Suite, and how to fix it. Please let us know what can be the cause of this issue and how to fix it.

Sending items to intruder breaks known behaviour

Making posts

2 requests with the same URL but different HTTP methods are not getting added to the Site Map

input suggestion boxes not being destroyed

Slow Website Loading and App Content Loading in iOS Device with Proxy Configured

Inconsistent Site Map behaviour / missing requests

Burp collaborator issue when using upstream proxy

Scope exclude requires include

discovery scan regards "301 moved permanently" as a success

test

test

test

test

HTML formatter indents incorrectly

Scanner Cookies Error

Does Burp try to send unsent files.

Cross domain script inclusion is not very reliable

Burp Suite has reported about use of Permanent or persistent cookies on client machine.

software-caused-connection-abort-recv-failed

What is Private IP addresses disclosed reported by Burp Suite.

Burp Suite Support Center