Bug Reports - Page 42 - Burp Suite User Forum

Lab: Host validation bypass via connection state attack does not work as intended

https://portswigger.net/web-security/host-header/exploiting/lab-host-header-host-validation-bypass-via-connection-state-attack The lab does not require to conduct request smuggling attack and can be easily solved by the...

Burp Suite Pro Intruder tab does not open

I have tried to use the intruder attack but the intruder tab does not open up to see what is going on. Tried reinstalling Tried rebooting the PC Burp suite pro version 2023.2.4 is installed on Ubuntu 22.04...

HTTP1.1 replaced by HTTP/2 in response header?

I intent to use Burp Suite to be able to see in more detail the communication of an application I just started to develop. I am currently using Community Edition v2021.5.2. My application responds normally when I do not...

Lab: Cache key injection

Dear team, the lab https://portswigger.net/web-security/web-cache-poisoning/exploiting-implementation-flaws/lab-web-cache-poisoning-cache-key-injection can be solved in a simplier way than it is supposed to be. The...

"no more license allowed"

Dear Team, License Details: p04GFQZVMCPXys8K8PtfJvd Hello, Unfortunately, I am unable to activate my license as I am receiving the message "no more license allowed". I work with several clients and I need to be...

Issues are not reflecting

Scans are getting completed but in Target issues are not reflecting.

An hour into my exam, the (first) application quit responding

While I was taking the exam, the first application stopped responding and I could not connect to it at all. My internet connection was fine, I was able to reach other sites with no issues. Furthermore, I was still able to...

Searching/Matching/Extracting Arabic/Hebrew Keywords isn't Working

For example when I type a text in Arabic/Hebrew Language under "Match and Replace" Under "Proxy->Options" it doesn't find a match even though there is one... The same for burp intruder when I extract a text in...

Stage 2 of Practice exam with SQLMAP 1.7.2

I think SQLMAP 1.7.2 on stage 2 is no longer able to solve the blind time delay stage, I did it manually last night and the sqli is exploitable manually. I was able few months back and checked my notes i then used sqlmap 1.6...

Anomaly when using SOCKS Proxy

Hi, I experienced a very anomalous behavior when contacting some URLs using Burp Suite with a SOCKS proxy configured. When contact such URLs, the response did not arrive. If I try to reach the same URLs using...

I cannot connect to my gmail

Hi, I can't connect to gmail either with google or firefox, they won't allow the proxy connection I get the error# 001 message. If any of you could help me solving this topic, I'm a bit in a hurry. PS I properly...

i'm being disconnected

Hi, I keep receiving the following message : The client has failed to negociate a TLS connection. I'm using burp suite community on a Macbook air Many thanks for your kind help and congrats for your app Anne

I get that message, can someone fix it?Thanks

The server is limiting the number of concurrent requests that can be made to it. Because of this, Burp Suite is throttling the number of concurrent HTTP/2 requests to the server's maximum.

Lab: Infinite money logic flaw - Random list of gift card codes makes lab unsolvable

Hi Portswigger team, it seems there is a bug in the "Infinite money logic flaw" lab, which makes the lab unsolvable (at least for me). I found the vulnerablity in this lab and I also totally get the presented...

Session terminated when checking a page for completion

Hey, I just noticed that when I check a page for completion in the Academy, I get logged out and redirected back to the login screen. The progression is saved.

Lab: Infinite money logic flaw

Hi, Although I am using maximum 1 concurrent request in Sniper attack and "POST /cart" request parameters are "productId=2&redir=PRODUCT&quantity=1" as a response to the "GET /cart/order-confirmation?order-confirmed=true"...

Burp Community Running on LINUX VM on a M1 Mac (cannot run embedded browser)

Does this work yet? I have searched the forums, saw some traffic for 2022...and cannot tell. It seems to install okay but I am running into proxy issues. So I decided to try the embedded browser. This does not...

Strange files created during installation

During the installation of BurpSuite CE on Windows 11, four files were created on my desktop. They are all named with 10-25 Chinese characters, and no file extensions. The files then disappeared. I saw the files pop up in...

Seesion cooki expier message show

hello sir/mam, Recently I came few months of my Portswigger id is not working properly it crash on my browser (firefox)

Burp pre-configured browser not working

Hi, im currently on a fresh install on kali (Pro Edition). Ive been using burp for years now without problems. However in cant launch the inbuilt browser from the Proxy tab. Just nothing happens, no error, no browser...