Burp Suite User Forum

Login to post

Scrolling with Apple Magic Mouse acts as dbl click,

Hello All. I am using OS Monterey 12.3 with Burp v2021.10.3. I am also using an apple magic mouse. When I scroll up and down the HTTP history list burp is repeatedly opening requests as if I had double clicked on them....

Last updated: Jun 16, 2022 01:24PM UTC | 1 Agent replies | 0 Community replies | Bug Reports

Logging in to PortSwigger using the Burp Chromium Browser

Recently discovered (I was able to log in just fine previously), when I try to log into PortSwigger in the chromium browser, I get an anti-forgery error. "The anti forgery check failed. This could happen if your session...

Last updated: Jun 16, 2022 12:59PM UTC | 3 Agent replies | 2 Community replies | Bug Reports

Can't Access Extensibility API documentation

Hi, I was trying to access the Burpsuite Extensibility Documnetation but each time I am getting redirected to homepage of extender(https://portswigger.net/burp/extender). I can open...

Last updated: Jun 16, 2022 09:51AM UTC | 1 Agent replies | 0 Community replies | Bug Reports

HTTP/2 request smuggling via CRLF injection not working

I'm dissapointed with the news labs. Exhausted of trying to follow the Solutions and waste a lot of time trying to get a solved lab. I don't know whether someone else has this same trouble, but I think you haven't test...

Last updated: Jun 15, 2022 12:54PM UTC | 1 Agent replies | 0 Community replies | Bug Reports

Lab: Lab not working: DOM XSS in document.write sink using source location.search inside a select element

This lab doesn't work. Text injected doesn't display.

Last updated: Jun 15, 2022 09:21AM UTC | 2 Agent replies | 1 Community replies | Bug Reports

wrong linefeed under macOS is breaking the Accessibility APIs

the linefeed under macOS should be `\n`. Burp seems to be enforcing the Windows linefeed, `\r\n`. that breaks the macOS Accessibility as it returns a length of 2 characters while `\r\n\` is actually one character. is...

Last updated: Jun 15, 2022 07:36AM UTC | 3 Agent replies | 3 Community replies | Bug Reports

under macOS, keyboard shortcuts using `option` don't work in Burp's text areas

hello again. because of the Accessibility issues i'm encountering with Burp that i've shared in another post (Windows linefeed rather than macOS linefeed), i'm trying to achieve what i want to do through key remappings....

Last updated: Jun 15, 2022 07:29AM UTC | 2 Agent replies | 3 Community replies | Bug Reports

Lab: H2.CL request smuggling not solved

Hi I'm having trouble getting the mentioned lab to be marked as solved. This is my request: https://snipboard.io/c4Ms86.jpg I've also disabled all plugins and tried it with and without the integrated browser....

Last updated: Jun 14, 2022 09:39AM UTC | 1 Agent replies | 1 Community replies | Bug Reports

3 SQLI labs are not working

Hello, This is a bug report about your labs, NOT Burp Suite. I posted it here, because this is the only forum I found. The labs listed below are not working. I even copied and pasted the answers from the solution...

Last updated: Jun 14, 2022 08:26AM UTC | 2 Agent replies | 1 Community replies | Bug Reports

Proxy is extremly slow, active scan failed

Hi, I using Burp Pro but since last week is proxy extremly slow and sometimes didnt load page properl. Error Faild to connect. But if I tryed other browser (non proxy through to burp) them page load fast and...

Last updated: Jun 13, 2022 01:39PM UTC | 2 Agent replies | 3 Community replies | Bug Reports

Crawl & audit very slow, never finishes (Burp pro 2020.9)

I am pretty new to Burp pro, so I don't have a lot of experience to know whether this is expected behavior or not. I am hoping some more experience users can give me some insight here... I am testing a wordpress based...

Last updated: Jun 13, 2022 12:46PM UTC | 4 Agent replies | 4 Community replies | Bug Reports

Burp suite is showing protocol error

when i tried using the lab for sqli the burp suite keep throwing me protocol error, i tried that by using firefox and the lab is working and didn't gave me an error. please resolve this issue.

Last updated: Jun 13, 2022 07:01AM UTC | 1 Agent replies | 1 Community replies | Bug Reports

Burp suite is showing protocol error

when i tried using the lab for sqli the burp suite keep throwing me protocol error, i tried that by using firefox and the lab is working and didn't gave me an error. please resolve this issue.

Last updated: Jun 13, 2022 02:42AM UTC | 0 Agent replies | 0 Community replies | Bug Reports

Error importing certificate in chrome -The Private Key for this Client Certificate is missing or invalid

I am having problems with chrome importing the burpsuite certificate I am getting this error: Certificate Import Error The Private Key for this Client Certificate is missing or invalid This only happens to me after a...

Last updated: Jun 12, 2022 03:15PM UTC | 1 Agent replies | 2 Community replies | Bug Reports

Error in first lab task

I keep getting the response "Missing parameter" when uploading a file. It does not seem to matter if the file is .jpg or .php I have tried through Burp and simply directly.... Am I doing something wrong?

Last updated: Jun 10, 2022 08:21AM UTC | 1 Agent replies | 0 Community replies | Bug Reports

Labs: Web cache poisoning not solved

I can successfully exploit myself but non of the labs get marked as solved. I've tried the first three web cache poisoning labs.

Last updated: Jun 09, 2022 09:07AM UTC | 5 Agent replies | 7 Community replies | Bug Reports

Lab: Web cache poisoning via ambiguous requests broken

Hi No matter what I do inside Repeater, the site always answers with 'Age: 0' and 'X-Cache: miss' which means I cant poison the target. I also tried removing 'Cache-Control' from the request. (no luck) When sending the...

Last updated: Jun 09, 2022 09:03AM UTC | 2 Agent replies | 1 Community replies | Bug Reports

Client Failed to negotiate a TLS Connection to respective application

Hello BurpSuite Support, When I was trying to test a web application using Burp Suite 2.1.07 it is showing with an error Client failed to negotiate a TLS Connection to www.xxxxxxx.com: Received fatal...

Last updated: Jun 09, 2022 06:47AM UTC | 8 Agent replies | 10 Community replies | Bug Reports

HTTP Request Smuggling TE.CL not work on Burp v2022.3.9 on Windows

Hi Support team, When trying to resolve lab "basic-te-cl". I found that instead I already unchecked at Update Content-Length for Repeater but after sent out the payload exactly the same as the solution, I still can not...

Last updated: Jun 08, 2022 09:24AM UTC | 1 Agent replies | 2 Community replies | Bug Reports

Forcing HTTP/1.0, particularly using Repeater

With the new http/2 normalizing 'feature' I now appear to be unable to use/force HTTP/1.0, which is required for IP address leakage findings: https://portswigger.net/burp/documentation/desktop/http2 I feel there should...

Last updated: Jun 08, 2022 09:18AM UTC | 1 Agent replies | 1 Community replies | Bug Reports

Page 2 of 104

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image