Burp Extensions - Page 27 - Burp Suite User Forum

Detected Desalinisation Jackson

Dear Team, I have installed active scan++ and Freddy, Deserialization Bug Finder. It shows my webapp is vulnerable to Detected Desalinisation Jackson with High severity and certain confidence, and in response tab it seems...

getting error while installing brupsuite

root@kali:~/Downloads# chmod +x burpsuite_community_linux_v2021_5_1.sh root@kali:~/Downloads# ./burpsuite_community_linux_v2021_5_1.shUnpacking JRE ... Starting Installer ... ./burpsuite_community_linux_v2021_5_1.sh: 598:...

Unable to download burp extensions

I am trying to install a few burp extensions but download from BAPP store fails. Have tried using upstream proxy as well. I am using corporate proxy to connect to https://portswigger.net/ but result is blank page. I am...

Burp Suite's Extension Turbo Intruder

Hello, When I type special characters (ö, ü, ı etc) in Turkish to the parameters sent in the post request using the turbo intruder, it converts them to characters like Ä ±, Ã¼, Ã¶. Is there any way to prevent...

IMessageEditor - Custom highlighting

Hey all! I've been adding a requested feature in Logger++, but have a question about the Burp API, and thought I'd post it here in case others have the same question in future. Logger++ has a "Grepper" functionality, and...

Bypass OTP attemtps

Are there any extensions or helpful documentation out there that might help me to bypass thr OTP attempts. I tried doing an attack but after a few OTP tries, it says I have tried too many times.

Cannot install burp extensions in 2021.5.1 of Burp Pro

I get the following error when I manually install *any* extension: java.lang.ClassNotFoundException: burp.BurpExtender at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:435) at...

How do I add a custom cookie to every request in the proxy? (Must be extender + session handler as cookie changes every request)

I saw a way to add custom headers to every request in Burp via an extension + session handler rule: (https://forum.portswigger.net/thread/multiple-headers-9e49d8d25cdf99e1769) however I was wondering if I could have some...

Flow - lost logs

Hi I was using the Flow extension yesterday which I just discovered and thought was awesome (should be built in), and I ran a large upload scan with the Upload Scanner extension. This morning all the logs were there...

not able to download the professional Burp exe file.

When ever i am trying to download the exe file its downloading the release notes.

Burp suite won't start at all with java 16, when trying to add extension

Hey I was trying to add a custom plugin to the Burp Suite Professional 2021.5 version. But when I run the Burp Suite from the command line to adding the...

No more activations allowed for this license

Hello, I hope you are doing well. I want to install burp suite professional in my new virtual machine but it shows this message : No more activations allowed for this license My purchase will end in October...

How does saveBuffersToTempFiles() work?

I'd like to save requests/responses to temp files as part of an extension and so I'm looking for a bit more info on how saveBuffersToTempFiles() works. It sounds like calling the method saves the IHttpRequestResponse object...

Burp Bounty not working properly

i install the Burp Bounty. But it's not show in tool bar & after install it did not give any output. and also not load Profiles. when i manually install, it show in toolbar but i can't load profile & add profile. it's gone...

proxy intercept

version-brup suite community v2021.2.1 kali version-2021.1 hey i try to proxy intercept from my foxyproxy and i confing this like this proxy type-http proxy ip-127.0.0.1 port-8080 ------------------ and i config my...

apologies found the the issue was an issue on my Postfix service Feel free to close this line of

apologies found the the issue was an issue on my Postfix service Feel free to close this line of inquiry

session timeout extention usage documentation

session timeout test extension is present in burp both in community and professional version, After installation how should i use it, Or what is the procedure to use this extension and how to view output. on internet only...

Recorded login sequence

I recorded a login sequence successfully. when replaying a recorded login sequence i realized that it does the first 2 steps opening the webpage and typing the user name. but it does not click on the next button and stays...

UpdateParameter for body parameters removes multipart attributes such as filenames

Dear support, I'm working on an extension that modifies the contents of a file that is uploaded via a multipart request. See the example request below: ``` POST /upload HTTP/1.1 Host:...

Pro Query from in one of the customer.

Hi, Can you please if below functionalist are available in PRO version? also does PRO license come with unlimited users/app test? Mobile Application Analytic and Penetration Testing tool with the following...