Burp Suite User Forum
Hello, it seems to me that the first lab (remote code execution via web shell upload) is not working correctly. I managed to print the contents of /home/carlos/secret but when I submit it says wrong solution
I work in web security in Korea and have been a long-time user of Burp products. Primarily, I use them on MacOS. I report bugs not only because they inconvenience me but also because my colleagues are experiencing the same...
Hi there, I've just installed Parrot OS on my macBook (UTM). Everything has been updated, however I cannot run Burpsuite. I get the following message: java.lang.UnsupportedClassVersionError: burp/StartBurp has been...
Hi, The shortcut keys (e.g. ctrl-C, ctrl-v) don't work in the new releases. Please fix. Thanks, Carl
Hi, when I created new project, caught several requests and added the selected into scope, I was offered the option to disable logging out-of-scope items to the history and I confirm it. It worked and there was a warning...
Hi, I noticed that with the new Proxy Intercept interface, when you intercept a request/response, open a custom tab (e.g. the one in your examples...
Hi I'm trying to update my Burp to version v2024_7_5. Usually it wad done automatically by Burp. This time it didn't work. I tried to do it manually by download file from portswigger and exec installer. It didn't work...
Hi, I'm trying to connect to website using burp chromium browser. But most of the time, the loading end by an error screen saying "failed to connect to website.com:443" I searched but didn't fought any awnser that helped...
Hi, I'm on version v2024.7.5 I encountered bug in intercept and repeater. When editing POST request that has attached in body binary file like xls. After modyfing as little as one character in "pretty" and "raw" tab in...
Bug overview: Intruder markers are added to the wrong character positions when the "Send to Intruder" action is executed while selecting text in the new GraphQL message editor tab. The Intruder markers appear to be inserted...
We have encountered an issue with Burp Suite Professional version 2024.7.5 where the application crashes while connecting through RDP. This issue significantly affects our workflow, as we heavily rely on remote sessions for...
Hello all, I use Ubuntu 24.04 LTS (with gnome 3). I have downloaded the last version (30 august 2024) which is burpsuite_community_linux_v2024_7_5.sh When I click on the "open browser" button, nothing...
Hi team, Need some clarifications on this scanner category "Cross-domain Referer leakage". My client needs to use this burp pro scanner feature. Burp Pro scanner reports "Cross-domain Referer leakage" even no...
seems that the lab Exploiting insecure output handling in LLMs i have also tried the sugested solution. if i ask for the review it delete my profile but is like carlos is never asking info about the l33t product.
Hello, an active scan on one of our applications reports a "Cross-domain Referer leakage". Taking a look at the response tab in Burpsuite, the following snippet is highlighted: <a class="info-box" target="_blank"...
Hello, I purchased access to the BSCP exam today, I'm going through the process for the second time. I passed the initial session on the Examity portal and when I try to start the exam on the examiner's page, I see the...
Labs are not getting in solved status even after taking the right approach or the suggested approach in the exercise. 1.Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and...
Hi team, So far, I have observed this unsloved to solved status bug. Even if you do the labs correctly, the lab doesn't gets solved. 1.Reflected XSS with some SVG markup allowed 2.Reflected XSS into a JavaScript...
In this lab, I'm stuck on step 5 of the solution: In the browser, go to the exploit server and enter the following HTML, replacing YOUR-LAB-ID with your unique lab URL: <script> var req = new XMLHttpRequest(); ...
I have received a bug report about our SAMLRaider extension that the modified requests are not being forwarded correctly. This problem occurs with the new BurpSuite version 2024.7.5. I can reproduce the bug, but I am not...
Page 2 of 152
Your source for help and advice on all things Burp-related.