Burp Extensions - Page 14 - Burp Suite User Forum

Graphql Raider Doesnot work anymore

Hi this is to inform you that Graphql Raider extension do not work anymore. So it is a request to kindly make a extension so that it could be easy for us to understand the Graphql Request. Thank You

SQLMap API is NOT running

I'm trying to use the SQLiPy extension but Burp won't recognize that the API is running. When I try to start the API through the interface, nothing happens. When I start the API through the CLI with "python...

error in the burp from JWT Editor extension & caches headers

my burp has issues in JWT Editor extension features and in X-cache response header, It sometimes doesn't work in labs

Burp Collaborator Missing

Hello, In my Burp Prof the Burp Collaborator is missing , yesterday I was working without problem and today when I run Burp the Collaborator is Missing, anyone help me ? A greeting and thanks

Burp API Hostname Resolution

I'm running into an issue where the HTTP request smuggler extension will fail to run because it cannot resolve the hostname. The host I'm testing can only be accessed through a proxy so I'm not 100% sure how the DNS...

Method IBurpExtender#registerExtenderCallbacks is not called anymore in 2022.9.5

Dear support, I have a Burp extension using the old extension API. When I run my extension within 2021.10.2 everything is working fine but when run my extension using 2022.9.5 version then I see that the method...

Is possible to install extension in headless mode ?

Dear support, I would like to install an extension in headless mode; meaning I don't want to open the UI and click on the buttons in order to have the extension installed. It is possible to run burp in headless mode and...

Active Scan++: Applinks in /.well-known/apple-app-site-association identified as Issue

Hi, this Burp extension is identifying as an issue that the file: /.well-known/apple-app-site-association is containing 'applinks', which is indeed the goal of such file. In the issue detail there is an "interesting"...

InQL Extension Loading Error

I am trying to Install InQL Extension on Burp following these instructions (https://github.com/portswigger/inql): To use inql in Burp Suite, import the Python extension: Download the Jython Jar Start Burp Suite Extender...

I get an error when calling the library from pyscripterer.

Hi. To use the parse library in pyscripterer, I went to python3 site_package and put the library in the loading modules option in Options>Settings. After that, when I load it with from parse import parse_qs, the following...

Burp Suite Community Edition Error Unknown host: portswigger.net

Hey team, Whaen i want to do some problem solve in portswage and open burp suit.Then the website give me Error.something like this:- Burp Suite Community Edition Error Unknown host: portswigger.net

Showing included libraries

Hi, burp uses a number of external libraries, for example bouncycastle. Why do you not publish which library and version is being used within burp, so that I can just re-use those libraries instead of having to add...

Multiple extensions give me a java error

Hi all, I use the latest version of Burp Professional on macOS Ventura. I notice that since yesterday some extensions don't work anymore and give me this error: Header Analyzer: at...

License Activation Error

I have reinstalled my kali linux and now when I tried to activate my Burp Suite Professional license it says "No more activations allowed for this license" error. Could you help me on this issue.

Cross-site scripting (DOM-based) - data is read from window.location.href and passed to $()

I'm getting the following error "The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.href and passed to $()." My code looks like this let url =...

Turbo Intruder with Session Handling Rules

Hello to all, I'm trying to learn turbo intruder. I created session handling rules for 2FA lab to get CSRF tokens like: get /login post /login post /login2 every time I use repeater or intruder my session handling...

Custom extension not marking requests as "Edited"

I've made an extension in Python that generates and inserts a custom header into all HTTP requests, and it works as-in the custom header is added correctly, but the requests do not have an Edited and Original version. All I...

Macro Items Returning Null

I'm trying to create a Burp Extension that uses values retrieved from a macro, however, macroItems[0].getResponse() returns null. Has anyone come across this error? If so, do you know how to fix it in python? I'm running...

Montoya API - Custom Scanner Check

Hi! Thanks for creating a new Burp Extension API, I am testing the new Montoya API to create a plugin with a custom scanner check. For this I used the ScanCheck interface and within the activeAudit function I would have...

no improvement with turbo intruder

Hi I'm doing SQL conditional lab, and I don't see and improvement with the turbo intruder. It's still very slow, especially after 100 requests or so. Are the labs throttled? Also I tried getting latest burp edition just to...