Burp Suite User Forum

Create new post

OpenAPI Parser Identify parameters in URL paths

Hi, We have a issue that when loading swagger files via swurg extension, "{}" is not recognized as a parameter in burp. The content of file is like: "/api/open/v1/teams/{team_id}/users": { "get": { ...

Last updated: Jul 19, 2023 12:46PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Create menu bar doesn't work

Hello, I'm currently creating a Java extension with Montoya API and I can't make spawn a menu bar. I tried to copy/paste the example code from the github but nothing happened. Did I correctly understand ? The menu bar...

Last updated: Jul 19, 2023 08:34AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

getting warning pop of like recording will not work in burp as the application uses the platform authentication.

I'm getting the warning message while doing the recorded login sequence of a web appliaction having 2 factor authentication. Warding Message: recording will not work in burp as the application uses the platform...

Last updated: Jul 18, 2023 02:07PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Update extension Elastic Burp https://github.com/portswigger/elastic-burp

Hey there seems to be issue in installing Elastic Burp extension on windows 11. The author has proposed changes which hasn't been implemented in Elastic BUrp...

Last updated: Jul 17, 2023 01:50PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

SQLMap DNS Collaborator Fail with anti-CSRF

Hi, I tried using the `SQLMap DNS Collaborator` extension with sqlmap using the extra option --dns-domain. However, it doesn't work well in cases that require anti-CSRF Tokens (--csrf-url, --csrf-token & --csrf-retries)....

Last updated: Jul 17, 2023 12:18PM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Set a comment for the request before it is sent out?

Hi there, is possible to set a comment for the request before it is sent out? Or it is possible only when modifying Request inside processHttpMessage()? Thank you.

Last updated: Jul 14, 2023 10:21AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extensions are showing blank

Hello, I'm using Burp Suite Professional version v2023.3.3, and I don't see any extensions in the BApp Store. Please suggest.

Last updated: Jul 14, 2023 06:56AM UTC | 3 Agent replies | 2 Community replies | Burp Extensions

Import external modules (requests, urllib3,...) errors

Hello, To execute my script I need to import requests module. I indicate to burp my site-package folder to load modules. Once i load my extension into burp, I have this error : SyntaxError: ("no viable alternative at...

Last updated: Jul 13, 2023 02:58PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Execute code when active scanner starts (only once per scan)

Hello, I would like to know if a method existed to do this. I want to execute my own script with burp scanner, but my script are crafting their own requests and stuff. So I only need my script to be executed once, like it...

Last updated: Jul 11, 2023 09:47AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Headless-Burp Not Recognizing License

I'm currently trying to test out the capabilities of Headless-Burp with BurpSuite Pro, but when prompted for the license key, it responds with "The supplied license key was not recognized. Please try re-entering your license...

Last updated: Jul 11, 2023 07:23AM UTC | 8 Agent replies | 8 Community replies | Burp Extensions

WebSocket API

I'm dealing more and more with websockets: is there _any_ way to modify requests on the fly? I'm not afraid of writing a custom extension or fiddle with scripting my own tools. FWIW, if you provide some guidance, I could...

Last updated: Jul 06, 2023 08:29AM UTC | 9 Agent replies | 11 Community replies | Burp Extensions

How is the ProxyHistoryFilter used?

I am trying to use the new ProxyHistoryFilter API to filter messaged with custom logic. the general idea is to transform an encoded request/response body then use the user's supplied regex/text to search that. However, the...

Last updated: Jul 03, 2023 01:36PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Jython standalone 2.7.3 error

I downloaded Jython standalone 2.7.3 when I try to add it to Burp I get the following error: java.lang.Exception: Extension class is not a recognized type at burp.Z_0u.ZF(Unknown Source) at burp.Z_0u.ZW(Unknown...

Last updated: Jul 03, 2023 09:17AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

installed extension macos

where can i find them pls

Last updated: Jul 03, 2023 06:38AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extension is not following redirects.

Hello Team, Hope you guys are doing well. I 'm currently writing an extension for my burp suite but i 'm facing an issue related to following redirects properly in extension code. I 'm using Jython as development, and...

Last updated: Jun 28, 2023 09:45AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Create a multi-task extension

Hello, I would like to create a multi-task extensions, checking for a lot of different things such as header presence, injection, or even broken access control. In order to do it, I though need to separate things and I...

Last updated: Jun 28, 2023 08:51AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Chinese charset not display correctly in issue table.

Chinese charset not display correctly in issue table. I already set the correct charset in User Option-Character Sets. HTTP message and Extender output display Chinese charset with no problem. Only issue table not display...

Last updated: Jun 26, 2023 01:37PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Issue Dashboard does not support Unicode Character

Hi issue dashboard and the relative api is useful but it does not support unicode charater(like Chinese),do you have any plan to resolve it?

Last updated: Jun 26, 2023 09:09AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Failed to load Python interpreter from Jython JAR file

I installed the Autorize extension but I got the following error: java.lang.Exception: Failed to load Python interpreter from Jython JAR file at burp.Zjqo.Zp(Unknown Source) at burp.Zy9.ZG(Unknown Source) at...

Last updated: Jun 26, 2023 08:18AM UTC | 3 Agent replies | 3 Community replies | Burp Extensions

Burp File Size - Extension data vs Persistence

Hi, Im having some issues with Burp file sizes due to extensions, but I'm confused as to the cause. I have an extension I created that is causing Burp files to balloon to 20x their normal size. As this extension makes...

Last updated: Jun 23, 2023 12:15PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Page 6 of 47

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image