Burp Suite User Forum

Login to post

Why Burp asks to activate license when starting by cmd.exe

Hi all, I met a problem with Burp. I developed a java extension to launch burp in cmd.exe. I wrote a .bat file and call it by Java Runtime. It asks me to activate the license again. If I open the .bat file directly, it...

Last updated: Sep 13, 2016 07:38AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Forcing Burp to open w/ scanner unpaused?

Is is possible to force Burp to open in a state which scans are forcibly unpaused? I'm working on a project where we call doActiveScans() to a single entry from getProxyHistory(), and upon clicking on the "Scanner" tab, the...

Last updated: Sep 07, 2016 08:28AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Loading external jars from extensions

Hello, I am building a Burp extension and I would like to incorporate external JARs, for example the gson library to store some settings in a file. For the life of me I can't figure out how to get this configured...

Last updated: Sep 06, 2016 07:32AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

How to enable SQLiPy on Burp

I have added SQLiPy on Burp and I can see the tab too however I am not sure what to be added in the proxy and port to start it. Even when I tried adding it with my PC's proxy nothing is happening when I click on Start...

Last updated: Aug 24, 2016 09:08AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Stop scanning form API call

Hi, Is there any API to stop scanning and start scanning. I want to stop scanning when session is invalidated and resume on proper sessions. How can I achieve this. Regards, Sid

Last updated: Aug 24, 2016 08:48AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Modifying message before intercepting

Hi, I'm writing an extension which uses processProxyMessage() to modify the targets and bodies of various requests in various ways. For certain requests, I use message.setInterceptAction(ACTION_DO_INTERCEPT) to have the...

Last updated: Aug 22, 2016 03:38PM UTC | 2 Agent replies | 0 Community replies | Burp Extensions

SQLPy Extension

Hi I cannot find the START SCAN button on the new version of SQLPy extension. Please help.

Last updated: Aug 22, 2016 09:24AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Spider treating active scan URLs with injected parameter queries as new urls to spider.

I built an extension that successfully spiders the application, but I have a problem where when active scanning starts in earnest, eventually it starts adding injected URLs into the scanning scope, thus duplicated the amount...

Last updated: Aug 17, 2016 11:16AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Load Extensions Headless

Hi, Can anybody tell me if loading an extension headless is still not possible as per https://support.portswigger.net/customer/portal/questions/9700725-load-an-extension-headless? I really need that to setup automatic...

Last updated: Aug 12, 2016 01:47PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

ofve49a2oc

<a href="http://hj7em18wwlos5wkj2clv.com">r9t9d08zud</a> <a href="http://sosn7mpf61awdd.com">486ir4cxhq</a> <a...

Last updated: Jul 28, 2016 02:07PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

8dgoljfc1l

<a href="http://7pg5m5z4808zp0vp.com">qfvsmsltdp</a> <a href="http://qm5a2k3y.com">vok3qgns30</a> <a...

Last updated: Jul 28, 2016 02:07PM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

processmessage called multiple times

Hi, I'm working on an extension that uses the IProxyListener's processProxyMessage, and I've noticed that processProxyMessage is seemingly called 3 times for each request (not response, specifically request). Is there a...

Last updated: Jul 20, 2016 08:13AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Remove URL from Scope

Hi, Is there any way to remove a URL from the list of target scopes? (Not excluding a url, just removing it from the include list) Thank you

Last updated: Jul 15, 2016 03:40PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Issue and question when implementing a ScannerInsertionPointProvider

Hi, Earlier this week I implemented a ScannerInsertionPointProvider to allow the active scanner to scan the custom type of multi-value parameters used by an application I was testing. Basically some parameters contained...

Last updated: Jul 07, 2016 01:18AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

How to send a request with different cookie value

Hi, I'm a noob and I would like to create an extension that after selecting a previous request allows to send automatically a new request with a different value for a certain cookie. Is this possible? If yes which API's...

Last updated: Jul 03, 2016 11:31AM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

lack of "/" in InsertionPoint

Hi, Burp Support Team I am trying to write an extension to improve activeScan. But I encountered a problem. When I sent http://example.com/test to activeScan, my extension can receive insertionPoint of type...

Last updated: Jun 29, 2016 08:04AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Custom issues in Burp-report

Hi Team, I have created an extender. Now, I want to run my extender along with active scan. What are all the steps to be followed? Request your guidance/support for the above said query. Thanks in...

Last updated: Jun 09, 2016 08:03AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Directory guessing extension for the Scanner

Is there any way to augment the scanner's capabilities to search through a list of directories that I specify? I know how to do this in intruder, but I want to be able to have this trigger automatically during a Burp...

Last updated: Jun 01, 2016 04:36AM UTC | 3 Agent replies | 4 Community replies | Burp Extensions

Variable Persistence

Is there a way to persist a variable between requests in an extension? For example I want to take a parameter from one response and then in a later request use this to calculate a different parameter? The value which needs...

Last updated: May 11, 2016 01:47PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Burp Extender socks5

I want to developer extender by jython, The Extender is port scan. I want all the traffic through socks5, How do i

Last updated: May 11, 2016 08:29AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Page 24 of 28

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image