Bug Reports - Page 78 - Burp Suite User Forum

Scan error

Whenever I run a scan it gives me the error "License not accepted". When I check my current license there seems to be no issues.

I can't use the browser and functions

Run the built-in browser and enter the address entered as below >> http://www.google.comhttp:8080/www.google.com/ Keep browser open automatically And an error message appears in BURP >>...

XSS Vulnerability and ClearText password

Hi Team, I have Web Application which is supported by SSL/TLS with Token mechanism and by using Burp Suite I can see password in clearText, Is this a vulnerability. I have already read the Article...

Version 2021.8.2

Burp suite is refusing to start a intruder attack. I launched from a terminal and I get an error message when I hit start attack. It said it was out of memory. What actions do I take to solve this?

Lab: CSRF where token is not tied to user session

I did this lab for more than 20 times, but still it is not being shown as solved. I fount out what the problem is, when I store my exploit and click on "Deliver it to Victim", seems like its not being delivered. How...

issue in web security academy labs

I am recently undergoing an issue in web security academy lab.Even after solving the lab, the website shows that it is not solved.Please find a solution for this problem.

Targeted web cache poisoning using an unknown header

After posting the comment I'm not getting victim' User Agent to complete the lab

During proxying, js scripts are not fully loaded(not till the end)

When I work on a corporate network, proxying traffic through a browser, I cannot open some sites due to an error. I tried different browsers, the problem is the same everywhere, the scripts in the answer are not complete....

[Burp Enterprise] Install using PostgreSQL

Hi, I've been trying to install the BE server. It all goes well until it gets to the database configuration: Enter the JDBC connection details for your database JDBC...

2020.11.3 Invisible Proxy does not honor disabled TLS 1.3

When Burp 2020.11.3 is configured to use an invisible proxy with TLS 1.3 disabled it does not honor that disabled protocol and will still negotiate TLS 1.3. I don't see a place to attach packet captures to demonstrate...

Brotli compression is not supported

Hello, The latest version of Burp doesn't support requests (actually the responses) that use Brotli compression. The responses come in a compressed form, hence all audit checks will fail to find any meaningful data in the...

Burp Browser Error

Hi Team, I have a problem when i open Burp embedder browser. This problem occur a lot, sometimes the browser is open but most likely it will not open the browser when i click Open Browser. Im using Burp pro latest...

Crash

Hello I'm crawling a rather large set of URL. After running for almost four hours it crashed. After restarting it, it crashed again shortly afterwards. Here's a picture from the...

Inability to edit text within repeater/intruder

Hi, I am running version 2020.5.1 on a 2019 MacBook Pro 16". When sending requests to Intruder or Repeater, I consistently cannot edit the contents of the request for a time. Eventually this does allow me to do so, but it...

Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft

Hello! I am currently trying to solve this lab and I am not sure if I am doing something wrong but even if I put the solution given, there seems to be some kind of internal server error.Is something like this...

Issues between HTTP2 and most extensions

Hi, I'm having a strange bug while testing a HTTP2 application (HTTP2 is enabled in Project Options). All the requests generated or modified by the extensions gives a HTTP 400 error, while all the others work...

lab not working

i cant solve the lab even after using solution it says entities not allowed .Lab: Blind XXE with out-of-band interaction via XML parameter entities

Scan will not complete

I have been monitoring a scan that was started at 4:30 yesterday (9/10) and it has not made it further than the first Active phase. The request count has stalled at 12,924. I am running BurpSuite Professional v 2021.8.2. I...

problem with this lab : Lab: Blind XXE with out-of-band interaction via XML parameter entities

i cant solve the lab even after using solution it says entities not allowed

I cant write "ı" in intruder payload

Hi, When ı is typed, it is added to the payload as 1. how can I solve?