Bug Reports - Page 49 - Burp Suite User Forum

proffesional version

ok so when you select community version and click download you can select either pro version or community and if you select pro it actually downloads without you having to pay

Error when we try to launch the browser

Below error message is displayed when we try to click on open browser in proxy menu net.portswigger.devtools.client.an unable to start browser

[WebSecAcademy] No bot access when after click deliver-to-victim

Hi admins, I'm sorry if here is not the place to report the bug of WebSecAcademy. I tried to find somewhere to report, but I cant, so I decided to come here :). When doing the labs in WebSecAcademy (exp: OAuth,...

unable to download burpsuite

looking at the download links for community and professional, ive tried loads of combinations, different browsers, different virtual machines, vpns but there doesnt even seem to be a download url associated with the download...

GBK encoding not supported resulting in a CRLF injection in burpsuite client.

Hey, just wanted to let you guys know that gbk encoding is not supported (ex 嘍嘊). So it resulted in a CRLF injection in my own request. Here is my tweet about it with PoC pictures:...

BurpSuite intruder bug

Trying to change host like so: Payload 0-255. GET / HTTP/1.1 Host: 192.168.0.§0§ Intruder automatically changes the Host to: GET / HTTP/1.1 Host: 0a1a0033046cbd6dc45355c6007a00c3.web-security-academy.net Thus...

CORS lab not functioning properly.

CORS labs do not giving intended HTTP results. POC: I tried "CORS vulnerability with trusted null origin" lab with below request GET /accountDetails HTTP/1.1 Host:...

Auto-scroll also changes focus since 2022.2.6

When looking at req/responses via Burp Proxy history with "Auto-scroll to match when text changes" the first match is not only auto-scrolled to but now also "auto-focused" on. So one extra click to get back to Burp Proxy...

Scan descrepency

Hi Team, I am looking out for an explanation or help to get the scans right. I have observed discrepancy in multiple scan results ran on the same application. Please help. Scan no 7: Trying to run active scan by giving...

Facing issues when mysql jdbc connection with BurpEnterpriseedition

Hello Support, am facing issue when connecting mysql jdbc with BurpEnterpriseedition 2022-12-19 07:10:08 [qtp751284665-49] INFO b.common.repository.DatabaseModule - DB timeouts: idle=60000, max life=120000 2022-12-19...

CORS policy

Hello; I using Burp pro v2022.12.4, i get a CORS error(can't make prefilight request) when login into seller.viettel.vn(yesterday morning, i still login). I dont know how to fix this bug. Help me plzzz

An error occurred. We apologise for the inconvenience.

Hi, I am going through Web security Academy Labs, I get the following error when I access "OS Command Injection Lab" "An error occurred. We apologise for the inconvenience." But other labs such XSS and SQLi are working...

OpenJDK 7 Multiple Vulnerabilities

The version of OpenJDK installed on the remote host is prior to 7 <= 7u351 / 8 <= 8u342 / 11.0.0 <= 11.0.16 / 13.0.0 <= 13.0.12 / 15.0.0 <= 15.0.8 / 17.0.0 <= 17.0.4 / 19.0.0 <= 19.0.0. It is, therefore, affected by multiple...

Burp v2022.12 and 2022.12.1

Hi, in Burp Scanner reporting wizard when "Select the file where the report will be saved" and I want to select the file, it let me select it but than it doesn't work, the select file field remains empty.

Examity does not redirect me

Hi, I'm currently not getting redirected to start the exam once I'm logged into Examity. Is there maintenance still going with their service? Or is it something wrong on my side? Kind regards,

Burp Pro Intruder Not Showing Results

Hi, Am recently having an issue with Intruder where the results arent shown, Intruder loads and allows me to start running but when trying to view the results the the icon shows in the taskbar but is pixelated heavily and...

Authentication bypass via OAuth implicit flow - Not working

Hello, I'm trying to authenticate the lab using given creds. The application stops in /oauth-callback url. No error only empty page. I used multiple browsers issue is same. Please help.

Practitioner Clickjacking Labs Not Working - Multistep and Trigger DOM XSS

Sorry to raise this issue as I see others have in the past but I cannot get either of the Practitioner Clickjacking labs to solve. Both these exploits appear to align well with the buttons in Chrome, but when I deliver the...

"Lab: CSRF where token is duplicated in cookie" using Firefox

Hello! It seems Firefox's [Standard Enhanced Tracking Protection](https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?as=u&utm_source=inproduct#w_standard-enhanced-tracking-protection) blocks...

lab-2fa-simple-bypass

An error occurred. We apologise for the inconvenience.

proffesional version

Error when we try to launch the browser

[WebSecAcademy] No bot access when after click deliver-to-victim

unable to download burpsuite

GBK encoding not supported resulting in a CRLF injection in burpsuite client.

BurpSuite intruder bug

CORS lab not functioning properly.

Auto-scroll also changes focus since 2022.2.6

Scan descrepency

Facing issues when mysql jdbc connection with BurpEnterpriseedition

CORS policy

An error occurred. We apologise for the inconvenience.

OpenJDK 7 Multiple Vulnerabilities

Burp v2022.12 and 2022.12.1

Examity does not redirect me

Burp Pro Intruder Not Showing Results

Authentication bypass via OAuth implicit flow - Not working

Practitioner Clickjacking Labs Not Working - Multistep and Trigger DOM XSS

"Lab: CSRF where token is duplicated in cookie" using Firefox

lab-2fa-simple-bypass

Burp Suite Support Center