Burp Suite User Forum

Create new post

BURP WS-Security SOAP Webservices security testing

I see the raw request with junk data for one of the operation in Wsdler. I added the Send to Intruder for the request in wsdler operation and when I navigate to Intruder, I encountered an error.Can you please suggest the way...

Last updated: Jan 25, 2018 10:26AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

API proxy show as edited request

Using the "processHttpMessage" method I'm able to edit a request. How can I make this changed request show up in the proxy as an edited request (just like when a request is edited with proxy intercept)?

Last updated: Jan 23, 2018 11:19AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Highlighting a tab in JTabbedPane of an extension

Hi, I am working on an extension that has its own JTabbedPane. I am trying to highlight a tab in my extension's JTabbedPane but for some reason the call to setBackgroundAt() simply does nothing. Oddly enough I am able to...

Last updated: Jan 22, 2018 08:33PM UTC | 5 Agent replies | 6 Community replies | Burp Extensions

CWE field in IScanIssue

I've noticed that XML exports of scan issues now include a <vulnerabilityClassifications> field that contains CWE information: <vulnerabilityClassifications><![CDATA[<ul> <li><a...

Last updated: Jan 15, 2018 08:13AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

TSL 1.2

Hi All, thats my first post on Burp forum! :) I'm here for a noble cause I guess: trying to give TSL 1.2 support to the glorious (and mistreated) Windows XP. It seems infact the only way to do that, is to configure the...

Last updated: Jan 09, 2018 11:48PM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Python Extension don't load in Burp on Fedora

I've create test python extension: <pre> from burp import IBurpExtender class BurpExtender(IBurpExtender): def registerExtenderCallbacks(self, callbacks): # your extension code here ...

Last updated: Dec 22, 2017 09:46AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Regarding Burp Extensions

Hi Team Currently I am using burp for sliverlight application which is developed in .NetFrame. .I am able to see the requests call in encrypted format which were developed in SOAP. Also I am unable to repeat the calls...

Last updated: Dec 18, 2017 07:49AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Nested message editors

Are there any artificial limitations regarding message editor nesting? By registering a message editor factory that creates instances of the class with the source code below, I expect it to act as as "proxy" and the...

Last updated: Dec 11, 2017 12:19PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Extension which scans a predined list of urls

Is there a current extension which will take a predefined list of URL's and scan them? I was writing my own extension and I was able to use sendToSpider(url) method to add my URL to the spider but I wanted to know if ...

Last updated: Dec 07, 2017 02:50PM UTC | 0 Agent replies | 1 Community replies | Burp Extensions

Burp Store and burp app validation

Hi, Regarding the burp store, do you do any check regarding the content of the burp extension? How can we guarantee that there are 100% safe and no traffic will be sent to 3rd party? Appreciate your response. Thank...

Last updated: Nov 28, 2017 11:26AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Collaborator: What are the exploitability differences between DNS lookups from different headers?

Looking at the scan logs from Collaborator, I'm seeing medium severity for DNS lookups when the URL is supplied in either X-Forwarded-For or X-Wap-Profile, but red when it's caused by the Host header. I'm trying to...

Last updated: Nov 27, 2017 09:21AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Need an extension to do advanced substitution

We are using a commercial web app testing product to test a customer's massive application and we need to work around a problem in the webapp testing product. Turning the test, the product does a GET and the customer's...

Last updated: Nov 16, 2017 09:59AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

IBurpExtenderCallbacks.makeHttpRequest() throws RuntimeException

If the network connection fails, callbacks.makeHttpRequest throws a RuntimeException. Any way we could get that method to declare that it throws a proper subclass of (presumably) IOException so we could check for and handle...

Last updated: Nov 09, 2017 10:22AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

How to retrieve only body of response

Hello team I am making http requests to a site and how to get only body of the response. here is the code :- req = self._helpers.buildHttpMessage(headers, body) print self._helpers.bytesToString(req) resp =...

Last updated: Oct 24, 2017 12:36PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Updating a parameter inline

Hey, When updating a query parameter through the "IExtensionHelpers.updateParameter" method, the parameter is removed from the query parameters, then updated and appended to the end. Is this intended functionality and if...

Last updated: Oct 23, 2017 07:49AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Haluan firmaa hakwrointi työ kalut

Toimitaan mulle pak. Hinta

Last updated: Oct 22, 2017 09:16AM UTC | 0 Agent replies | 0 Community replies | Burp Extensions

Extra Extensiona

Is there any extension need to be indatalled manually.

Last updated: Oct 16, 2017 10:02AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Burp UI Development Using NetBeans

Hey All, I am new to Burp Extender development (and Java programming in general). I have had some moderate success getting a handle on how to build Burp extensions, and using NetBeans to build GUIs. I am able to easily...

Last updated: Oct 10, 2017 11:11PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

DNS requests

I'm using the following Python to try to make DNS requests from my extension: import dns.resolver ... myResolver = dns.resolver.Resolver() try: myResolver.query(domain, "MX") ...

Last updated: Oct 06, 2017 11:50AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Extension Not Loading Due to "Stale" Reference

So I noticed the following behavior when using the Python Scripter extension: 1. Installed the extension 2. Added custom script containing error in Scripter tab 3. Closed Burp 4. Relaunched Burp and noticed the...

Last updated: Sep 28, 2017 03:30PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Page 41 of 50

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image