Burp Suite User Forum

Create new post

Extension does not load when BURP is loaded through Windows Task Scheduler while not logged in

I'm trying to run BURP with my extension with the Windows's Task Scheduler. When I'm logged in, the Task Scheduler is able to open BURP in headless mode and preload my python extension fine. The issue is when I'm not...

Last updated: Jun 09, 2020 11:37AM UTC | 4 Agent replies | 3 Community replies | Burp Extensions

Burp not intercepting Selenium HTTPS traffic

Hi, I am using Selenium to perform a login process but I cannot intercept the HTTPS traffic with Burp. I set up Burp to work with my browsers, and I can surf websites with no issues manually (showing that proxy and...

Last updated: Jun 09, 2020 09:54AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

sdas

asdasdasdasdasdas

Last updated: Jun 09, 2020 08:46AM UTC | 0 Agent replies | 1 Community replies | Burp Extensions

Error in Active scan ++

Hello I have the following error: java.lang.Exception: Failed to open Jython JAR file at burp.ee1.<init>(Unknown Source) at burp.fae.a(Unknown Source) at burp.bzo.lambda$panelLoaded$0(Unknown Source) at...

Last updated: Jun 08, 2020 08:37AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

saving state for extension data

Is there a method to save/restore extension data as part of Burp's "save state"? I didn't see anything in the API docs. Just trying it, the extension data wasn't saved during a save and restore. Anything I'm missing, or...

Last updated: Jun 04, 2020 11:32AM UTC | 8 Agent replies | 7 Community replies | Burp Extensions

auto swagger detector

i am beginner in python and i need to add this function to burp, detecting if swagger is enabled, if yes new issue must be add to issues list, i choose to use ScopeChangeListener to check once the user config the scope in...

Last updated: Jun 04, 2020 09:12AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

addToSiteMap(IHttpRequestResponse item) generates redundant requests

Hello, Could you advise how to fix the the problem of the duplicate requests in the site map? While adding of the 1 request "GET /fatiz1997/site-map-extension?_pjax=%23js-repo-pjax-container HTTP/1.1" Burp generates...

Last updated: Jun 03, 2020 12:07PM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found

Hi, I am trying to install burp on an Android 10 emulator and I an getting the following error when I try to access the app I'm trying to test. ```javax.net.ssl.SSLHandshakeException:...

Last updated: Jun 03, 2020 07:57AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Request and Response threads

Hi I'm the author of the request timer extension and a user has an issue when using using intruder with multiple threads in that request/responses are getting lost. I'm guessing (since I don't have a pro version any more to...

Last updated: Jun 02, 2020 08:22AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Is it possible to add new cookies and completely overwrite the cookie jar with an extension?

Looking to create an extension where one can open cookie data from a file, and load all of that into the cookie jar. Is that possible with Burp's APIs?

Last updated: Jun 02, 2020 07:52AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Unable to send message to UI

Hi, I'm trying to create a GUI extension. BurpExtender.java --- package burp; import myCompany.Extend; import myCompany.Extender; public class BurpExtender implements IBurpExtender, IHttpListener,...

Last updated: Jun 01, 2020 02:49PM UTC | 2 Agent replies | 5 Community replies | Burp Extensions

Detect theme in jython

Hi. Is there a way to detect the current theme, ideally in jython, without having to find and read the user config json file? I have an extension which uses an HTML JTextPane, but the default font colours are hard to read...

Last updated: May 28, 2020 04:46PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Burp extension doesn't work if proxy is enabled

Hi, I am developing a Burp extension that involves Selenium. It runs fine if Burp intercept is turned off and the proxy is not set in the code, but clearly this way Burp cannot intercept the messages. When I enable those...

Last updated: May 27, 2020 02:12PM UTC | 4 Agent replies | 3 Community replies | Burp Extensions

How add button to form?

https://snipboard.io/pq3AtV.jpg is it possible to add a button to the form??

Last updated: May 27, 2020 10:49AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Burp Extension problems

I use a Linux kali 5.4.0-kali4-amd64 #1 SMP Debian 5.4.19-1kali1 (2020-02-17) x86_64 GNU/Linux installed in a VM. ANytime i restart my machine my burp extension disappears. I use Burp community edition.

Last updated: May 26, 2020 09:17AM UTC | 4 Agent replies | 3 Community replies | Burp Extensions

How can I get all of the information which opened tabs in the Repeater?

I want to get all of the information which opened tabs in the Repeater tab. I read APIs in https://portswigger.net/burp/extender/api/ but I can't find out anyways to get that information. Is there any way to get it...

Last updated: May 20, 2020 08:57AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Obtain the list of enabled URLs in the included target scope

Hi, I would like to output in the extension tab currently enabled target scope. As I've already found there are registerScopeChangeListener(), getScopeChangeListeners(), getScopeChangeListeners(), isInScope(URL),...

Last updated: May 20, 2020 07:27AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Import old HTTP requests and responses into Sitemap

Hello - Been looking around in the forums and it doesn't appear anyone has asked this yet. I am attempting to write an extension that parses a .har file, which is a file that contains HTTP Requests and Responses. I want to...

Last updated: May 18, 2020 07:57AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Bypass WAF session handling

We were trying to use Bypass WAF Extension to test the IP address black-list handling on our WAF. I have followed the steps in the post https://www.codewatch.org/blog/?p=408 and have added the session handling rule. I...

Last updated: May 14, 2020 02:59PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Ability to Create popup in Burp extension

While writing a new burp extension, is there a possibility that it can issue a popup or notification to the user ? For example "Hello world" should popup to the user. Is this possible or a extension can create it only to the...

Last updated: May 14, 2020 02:17PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Page 30 of 48

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image