Burp Extensions - Page 17 - Burp Suite User Forum

License Activation Error

I have reinstalled my kali linux and now when I tried to activate my Burp Suite Professional license it says "No more activations allowed for this license" error. Could you help me on this issue.

Cross-site scripting (DOM-based) - data is read from window.location.href and passed to $()

I'm getting the following error "The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.href and passed to $()." My code looks like this let url =...

Turbo Intruder with Session Handling Rules

Hello to all, I'm trying to learn turbo intruder. I created session handling rules for 2FA lab to get CSRF tokens like: get /login post /login post /login2 every time I use repeater or intruder my session handling...

Custom extension not marking requests as "Edited"

I've made an extension in Python that generates and inserts a custom header into all HTTP requests, and it works as-in the custom header is added correctly, but the requests do not have an Edited and Original version. All I...

Macro Items Returning Null

I'm trying to create a Burp Extension that uses values retrieved from a macro, however, macroItems[0].getResponse() returns null. Has anyone come across this error? If so, do you know how to fix it in python? I'm running...

Montoya API - Custom Scanner Check

Hi! Thanks for creating a new Burp Extension API, I am testing the new Montoya API to create a plugin with a custom scanner check. For this I used the ScanCheck interface and within the activeAudit function I would have...

no improvement with turbo intruder

Hi I'm doing SQL conditional lab, and I don't see and improvement with the turbo intruder. It's still very slow, especially after 100 requests or so. Are the labs throttled? Also I tried getting latest burp edition just to...

Chrome's Dom Invader buggy on sites protected by recaptcha

Hello, I am trying to use Dom Invader in order to find DOM XSS vulnerabilities on a website that is protected by google recaptcha. As soon as I enable DOM invader, I am getting logged out and when I try to log in it...

Hash lookup

Hi all, Sometimes I have a hash and want to reverse it to find the original text and the used hash algorithm. I want to ask if there is any extension that performs hash lookup. Thanks

BurnSuite website SSL error

I have configured Firefox to used Burp as proxy and everything works fine, except for one website. At the first "get request" everything works as it should be, that is, passed the traffic to burp and then i forwarded it....

Carbonator : No HTTPS traffic

I have configured carbonator and I am running the following command java -jar -Xmx2g -Djava.awt.headless=true /home/webscanner/BurpSuitePro/burpsuite_pro.jar https example.com 443 / --user-config-file=Config/userNew.json...

Burp wasn't intercepting localhost in brave browser

I'm using brave browser and wasn't able to intercept traffic in localhost anyone knows any fix on this? Thank you! - Certificate is okay - Other sites was intercepted

Email regard

Hi Team, I set up email notification in Burpsuit. when the site is scanning I want to get report by mail. I am receiving summary report but i want to get detailed report how to setup to get detailed report.

[Param Miner] Cachebuster in the User-Agent headers causes CloudFlare 403 block

Param miner automatically adds a cache buster to the user-agent, this gets blocked by CloudFlare. I've attempted everything, please how can I stop this behaviour??? Is there a workaround ???

How do I make line wrap?

How can I make line wrap enable for the string response with the function txtInput.setText()?

Unable to load installed extension.

Hi Team I have downloaded some extensions from BApp store but unable load them in burp menu bar for e.g. J2EE scan. When i check the load option under extender menu it shows success but does not shows anything in menu bar....

How do I perform manual checks like a batch?

Hello Burp Users, I don't want to perform any crawling or automated scans for my testing. I have about 50 - 100 requests that I want to send to the target and evaluate the raw responses. Are there any burp extensions to...

Upload Scanner - ReDownloader not accessible

Hi all! Got a quick question for anybody using the Upload Scanner extension with Burp Suite Pro v2022.8.5. I've watched the instruction videos and it advises that if you want to use the ReDownloader functions, you...

Custom Header extension for Burp Enterprise - How to write it?

Hello! I need to configure custom headers for a scan with Burp Enterprise. I saw that a custom headers extension exists, but only for Burp Suite. I'd like to give a try to writing my own Burp Enterprise extension but...

setJMenuBar does not work

system: macOS catalina 10.15.4 JDK: 1.8 burpsuite: version 2022.8.5 I build a plugin to show a JFrame with menubar content like this JMenu jMenu1 = new JMenu("File"); JMenu jMenu2 = new...