Burp Suite User Forum

Create new post

Facing issues while running the Burp Infiltrator

Hi Team, I'm trying to use burp infiltrator and trying to solve the issues which have occured while running this tool. Also, trying to find more details on internet but not found much details so thought of discuss this...

Last updated: Jul 16, 2024 04:00PM UTC | 3 Agent replies | 3 Community replies | Burp Extensions

Lab: SameSite Strict bypass via client-side redirect - this lab broken too

This is my solution and works with view exploit, but not working when delivering neither in chrome, not burp. Therefor unfortunately the lab is broken. Can you please fix please? thank...

Last updated: Jul 15, 2024 06:34PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Unable to filter X-Forwarded-Host with Param Miner Burpsuite Professional v2024.5.5, Lab: Password reset poisoning via middleware

Hello I have attempted this lab: Password reset poisoning via middleware, and run Param Miner on this request, choosing the "Guess Headers". I have tried this thrice, but I still could not get the X-Forwarded-Host even if I...

Last updated: Jul 11, 2024 11:43PM UTC | 3 Agent replies | 5 Community replies | Burp Extensions

extender

So this 'issue' has been happening to me for the last few versions of burp suite pro. right now I am running the latest .18 version. In the extender tab i have the option to automatically reload extensions on startup...

Last updated: Jul 10, 2024 05:19PM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Extensions are not loading with Burp defaults

Hi Team, I always use Burp defaults option for configurations while opening/creating projects. I have a few extensions installed such as Retire.js, TokenJar, Active Scan++, etc. What my issue is that all the extensions...

Last updated: Jul 10, 2024 05:16PM UTC | 5 Agent replies | 5 Community replies | Burp Extensions

Burp Suite Param Miner

Using the param miner via 'Extensions->Param Miner->Param Miner->fat GET' result in 'Queued 0 attacks from 1 requests in 0 seconds' in the output of the extension. Does anyone know why it doesn't scan anything?

Last updated: Jul 10, 2024 02:22PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

cannot modify request in insertion bechecks

Hello Is there support modify request in insertion-base bchecks? Sometimes we want to continue modify request after replacing or appending payload, like change mehod or add some headers.But I found I cant do these when I...

Last updated: Jul 09, 2024 11:12AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Query Associated Param miner

What is the purpose or use of the option "canary" in param miner when guess all parameters option is selected?

Last updated: Jul 04, 2024 03:42PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Burp pre configured browser is not working

When am opening burp pre configured browser its not working. Am seeing browser opened but not able to access anything in it showing error as "Error code: STATUS_DLL_INIT_FAILED"

Last updated: Jul 04, 2024 08:46AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

withUpdatedParameters(List) function updates only the first parameter

Hi, I'm struggling with modification of the request payload in a class extending ExtensionProvidedHttpRequestEditor. In the getRequest() function, I'm packing the content of my custom editor and want to update request...

Last updated: Jul 01, 2024 09:28AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

turbo intruder

my intruder works fine with macros but turbo intruder won't

Last updated: Jun 25, 2024 03:48PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Turbo Intruder Not starting

Im very new to Burp Suite, i also never used sm like this. Today I was trying to solve the Bypassing rate limits via race conditions Lab by following a video but somehow im just stuck at the part when i start the attack on...

Last updated: Jun 23, 2024 12:15PM UTC | 7 Agent replies | 10 Community replies | Burp Extensions

Has the new MontoyaAPI removed the saveExtensionSettings and the loadExtensionSettings method

Hi, I am trying to develop a Burp Suite extension, and the work is almost done. Now, I need to implement a persistent way to store the data used in the extension. I did try the PersistedObject to do the same, and I have...

Last updated: Jun 20, 2024 09:00AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

AI Automated Scan

Hello, Could you please he me with question below? Burp Suite professional tool will support AI(artificial Intelligence) application security testing? Are there any AI(artificial Intelligence) features configured in burp...

Last updated: Jun 11, 2024 08:46AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

HTTP Request Smuggler doesn't work

HTTP Request Smuggler is not working properly, when I start Attack, it does not proceed from "ENGINE WARMING UP". The execution environment is as follows. ・Burp suite:2023.10.2.3 -2023-10-02 ・Extension : Both are the...

Last updated: Jun 10, 2024 06:47AM UTC | 6 Agent replies | 8 Community replies | Burp Extensions

API Testing using Postman Collection file

Is there any Burp Extension to run API Testing using Postman Collection file?

Last updated: Jun 06, 2024 09:13AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

tcp proxy

Dear Sir, Can we capture and modify the tcp request and response through burpsuite.

Last updated: Jun 05, 2024 01:20PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Montoya API Scanner Examples

Hi, I'm trying to build an extension that reads results from the BurpSuite Pro scanner using the Montoya API and I was wondering if there are any examples out there for how to handle audit issues?

Last updated: Jun 05, 2024 12:34PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Importing and Using Arbitrary Java Classes

Is it possible to make use of arbitrary classes imported from external modules in Java, e.g. the UriBuilder class? My extension makes use a class in the same project folder that implements logic to generate a token that I...

Last updated: Jun 05, 2024 09:50AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Custom Send To on Mac

Hi all, i’m curious if anyone has installed and run the extension called Custom Send To on a Mac? I am looking for a way to send the body of a response to a API/URL and receive back response from that URL and this was...

Last updated: May 22, 2024 03:33PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Page 1 of 49

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image