Bug Reports - Page 96 - Burp Suite User Forum

Connection resets and Failed to negotiate TLS connection

Burp Pro - has anyone else solved the issue of getting continual Connection Resets like fxxxing hundreds. And not being able to tell what is causing it Also lots and lots of Client failed to negotiate a TLS...

Labs Failing to Respond

Hi, I'm having issues with this lab,"Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria". As soon as I enter the X-Forwarded-Host header, the lab server fails to respond. I've...

Advanced Scope Control does not follow correct regex syntax

Hi, I noticed the advanced scope control mentions you can insert regex, but it does not actually follow correct regex syntax. Asterisk `*`, should be treated as a quantifier, matching zero to unlimited times, however...

RegEx does not work properly on HTTP Request and Response

Hello I want to use regex to remove those empty lines from the HTTP responses that developers placed there. I used ^ to get the beginning of each line, but what it returns is just the first line of the response and...

Logic error in lntruder module

1、I need to brute force the username and password fields.See 1. JPG POST /xxx/xxx HTTP/1.1 Host: xxx.xxx.xxx.xxx Connection: close Content-Length: 56 Accept: application/json, text/javascript, /; q=0.01 Origin:...

Smart decode is not smart

The smart decoder is not working anymore for even simple base64 payloads. Please debug the issue and let me know. Thanks, Rod

Request Text Mangling in Proxy

After right clicking and selecting "Send to Repeater" the request text becomes mangled (overlapped in some areas). Running Burp 2020.12.1 Professional with Dark theme in Ubuntu 20.

Backup file false positives

I am getting many, many instances of the "Backup file" issue type. The issue is that the scanner makes a request that is a variant of a legitimate request, for example instead of GET /users/sign_in.json, it will call GET...

Unable to reactivate license after removing burp from computer

Hi, I had my burp pro license at the limit. I wanted to remove it from one machine to activate it on another. So I did remove burp from my computer under the help menu, but it is now neither allowing activating the license...

Lab access control user role can be modified in user profile

Hi, I solved it once before but now I was revising and I think it crashed because when I logged in my user using the provided credentials wiener:peter then I went to my account page and then I submitted an updated email...

Failed to replay recorded login sequences

I followed the recorded login sequences instruction and successfully generated JSON objects for application login data. But I'm not able to replay and validate the data. All I see is a blank webpage during the replay. I...

SQL injection UNION attack, retrieving data from other tables

administrators password not working......... no problem with carlos and wieners

Intruder crashes Burp when using SOCKS5 proxy with DNS through proxy

Whenever I set Burp to go via a SOCKS5 proxy and I tick the box to send DNS requests through the proxy, everything works fine (proxy, repeater, etc) except Intruder, which shows an error "Failed to resolve hostname" and then...

Burp becomes unusable over a Socks proxy

When connecting my browser to a Socks proxy I see expected page loading speeds but when I connect my browser to burp and burp to a Socks proxy burp takes forever to get the response and forward it to the browser if at all....

Lab access control user role can be modified in user profile

Hi, I solved it once before but now I was revising and I think it crashed because when I logged in my user using the provided credentials wiener:peter then I went to my account page and then I submitted an updated email...

Lab: SQL injection UNION attack, retrieving data from other tables

Hi, I am using the following payload in Burp Suite to get response containing usernames and passwords. GET /filter?category=Accessories'+UNION+SELECT+username,+password+FROM+users-- HTTP/1.1 I managed to get the...

On installation of Burp Suite Enterprise Edition on my Mac I am getting an error

The error says Unknown installation problem. Failed to connect to enterprise server.

Burp Pro v2020.12.1 not displaying spaces in 'Pretty' format

Hi Folks, I appear to have encountered a glitch with Burp Pro v2020.12.1. Whenever I attempt to enter a space in a JSON string such as "param": if the following character is not a " then the Request within Repeater will...

Data is read from location and passed to $()

Hi Team, Burp scan reported a vulnerability in following js statement from jquery.userTimeout.js library. Seems like a false positive, Could you please help me to understand how this can be exploited? Data is read...

Grep Extract Not Working Properly

Grep extract rules stopped working properly in recent versions. As recently as 2020.1 and still in 2020.2.1, creating a regex rule for a finished attack will not apply to the results, and string parsing rules only apply...

Connection resets and Failed to negotiate TLS connection

Labs Failing to Respond

Advanced Scope Control does not follow correct regex syntax

RegEx does not work properly on HTTP Request and Response

Logic error in lntruder module

Smart decode is not smart

Request Text Mangling in Proxy

Backup file false positives

Unable to reactivate license after removing burp from computer

Lab access control user role can be modified in user profile

Failed to replay recorded login sequences

SQL injection UNION attack, retrieving data from other tables

Intruder crashes Burp when using SOCKS5 proxy with DNS through proxy

Burp becomes unusable over a Socks proxy

Lab access control user role can be modified in user profile

Lab: SQL injection UNION attack, retrieving data from other tables

On installation of Burp Suite Enterprise Edition on my Mac I am getting an error

Burp Pro v2020.12.1 not displaying spaces in 'Pretty' format

Data is read from location and passed to $()

Grep Extract Not Working Properly

Burp Suite Support Center