Burp Suite User Forum

Create new post

HTTP Request Smuggler - Dashboard Items Not Working

Running Burp Pro 2024.3.1.4 and HTTP Request Smuggler v2.16 on MacOS 14.4.1 When I run a Smuggle Probe on a request, the findings appear in the Dashboard's Summary tab but they do not appear in the Issues tab. If I try...

Last updated: May 17, 2024 09:13PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

messageEditorHttpRequestResponse cannot update multiple http headers

Hi there, I tried to use montoya to update 2 http headers messageEditorHttpRequestResponse.setRequest(messageEditorHttpRequestResponse.requestResponse().request().withUpdatedHeader("header1", "test1")); // ...

Last updated: May 16, 2024 08:56AM UTC | 2 Agent replies | 3 Community replies | Burp Extensions

Request Highlighting

I'm working on a new ScanCheck Burp extension and running into some issues using the highlighting functionality. AuditInsertionPoint (e.g. as created using AuditInsertionPoint.auditInsertionPoint()) has a method...

Last updated: May 14, 2024 12:28PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Can't complete ' Reflected XSS protected by very strict CSP, with dangling markup attack '

Hi, I tried to complete "Reflected XSS protected by very strict CSP, with dangling markup attack" but in the part use the payload to get the `window.name`. I can't get in Burp Collaborator or in log's exploit server. Is it...

Last updated: May 13, 2024 08:27AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Check if a BCheck is already installed

Hi, I've used the method importBCheck() that will run on startup. However, if the BCheck is already installed, it just duplicates the BCheck. I've hacked a solution to look at the path key in the user json to see if...

Last updated: May 10, 2024 09:47AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Bcheck enhancement

Hello: I had the same idea of devlop some script engine to achive burp scanner rule like bcheck and completed recently,which was based yaml.So I want to discuss with you about the bcheck ability: 1. would you consider to...

Last updated: May 07, 2024 01:54PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Failed to load Python interpreter from Jython JAR file

Hello Dear, I am facing an error. I am not able to add my extension in Burp. I am getting the follow error: java.lang.Exception: Failed to load Python interpreter from Jython JAR file at burp.a3t.<init>(Unknown...

Last updated: May 06, 2024 03:40AM UTC | 3 Agent replies | 6 Community replies | Burp Extensions

I cannot install Autorize extension from BApp

I'm enrolled in APISec University and I'm trying to install Autorize, but keep getting errors. I follow the instructions, but keep getting errors regardless of which method I use to try and install it.

Last updated: May 01, 2024 07:26AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

How do I get Add Custom Header extension to work

I've input the Header name and value but the custom header doesn't show up in requests in Proxy. Are there any alternatives? It would be good if this worked - many programs require it

Last updated: Apr 25, 2024 06:14AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Not able to convert string to JSON object in Burp Extension using Montoya API

Gson gson = new GsonBuilder().setPrettyPrinting().create(); String jsonString = "{ \"name\" : \"John\", \"age\" : \"20\", \"address\" : \"some address\" }"; JsonElement jelem = gson.fromJson(jsonString,...

Last updated: Apr 22, 2024 09:40AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

ClassNotFoundException from extension using Jersey

Dear support, I have written an extension that is using behind the scene Jersey. Jersey is an open source framework for developing RESTful Web Services in Java. It provides support for JAX-RS APIs and serves as a JAX-RS...

Last updated: Apr 19, 2024 02:44PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Accessing Requests of Audit issue with No Response in Burp Suite Using an Extension

I have an issue detected by the issue handler in Burp Suite, where a time-based SQL Injection vulnerability is identified but there's no response in the issue details, only a request. How can I access this request using an...

Last updated: Apr 17, 2024 03:11PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extensions Development - Burp Launching and Licensing Issue

Hi All, I am beginning to contribute to a Burp Suite extension and I'm running into some issues debugging. I have followed the instructions in this thread:...

Last updated: Apr 15, 2024 04:18PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

JWT Editor cannot be loaded anymore

Hi, I installed the Burp Extension "JWT Editor" and used it for a couple of days. Now it is not loaded anymore when I start Burp. I unloaded and reloaded it, removed and re-installed it, JWT Editor is simply not working...

Last updated: Apr 15, 2024 03:49PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

request().url() return value inconsistent

While working on an extension I came across an odd behavior but I'm not sure if it's expected or something with my extension code. It looks like for some reason, the HttpReuqestResponse.request().url() returns different...

Last updated: Apr 15, 2024 08:41AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

sqlpyi

Hi I am trying to install sqlpyi but its not working , i tried many things but its showing sqlmap api is not running.I am using window machine. Colud you help me for this issue. Below some error when i tried to run...

Last updated: Apr 15, 2024 08:40AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

api to toggle request method and body encoding

Hello Is there some api support to toggle http request? I konw the toggleRequestMethod can be use to toggle method from GET and POST,is there some one support toggle param to mutipart param in montoya api(like use it in the...

Last updated: Apr 10, 2024 10:27AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Are Jython extensions deprecated?

Hello, I was looking into writing an extension, and all of the current documentation seems to indicate it should be done in Java via the new Montoya API. Is Jython support going to go the way of the old extender API?...

Last updated: Apr 09, 2024 12:24PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

How to limit binary response size

Hello I'm developing my extension to scan some backup file, like test.zip.But it will affect the performance when a large binary file be found.Is there some setting or some advices to limit the size of response in burp...

Last updated: Apr 08, 2024 09:00AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Global keyboard shortcut

Hi, I am writing an extension where it needs to access HttpRequestResponse object attached to currently focused editor from proxy, repeater, intruder tabs etc. I know context menu has this object encapsulated in event...

Last updated: Apr 05, 2024 09:34PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Page 1 of 49

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image