Burp Suite User Forum

Create new post

Jython standalone 2.7.3 error

I downloaded Jython standalone 2.7.3 when I try to add it to Burp I get the following error: java.lang.Exception: Extension class is not a recognized type at burp.Z_0u.ZF(Unknown Source) at burp.Z_0u.ZW(Unknown...

Last updated: Jul 03, 2023 09:17AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

installed extension macos

where can i find them pls

Last updated: Jul 03, 2023 06:38AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Extension is not following redirects.

Hello Team, Hope you guys are doing well. I 'm currently writing an extension for my burp suite but i 'm facing an issue related to following redirects properly in extension code. I 'm using Jython as development, and...

Last updated: Jun 28, 2023 09:45AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Create a multi-task extension

Hello, I would like to create a multi-task extensions, checking for a lot of different things such as header presence, injection, or even broken access control. In order to do it, I though need to separate things and I...

Last updated: Jun 28, 2023 08:51AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Chinese charset not display correctly in issue table.

Chinese charset not display correctly in issue table. I already set the correct charset in User Option-Character Sets. HTTP message and Extender output display Chinese charset with no problem. Only issue table not display...

Last updated: Jun 26, 2023 01:37PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Issue Dashboard does not support Unicode Character

Hi issue dashboard and the relative api is useful but it does not support unicode charater(like Chinese),do you have any plan to resolve it?

Last updated: Jun 26, 2023 09:09AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Failed to load Python interpreter from Jython JAR file

I installed the Autorize extension but I got the following error: java.lang.Exception: Failed to load Python interpreter from Jython JAR file at burp.Zjqo.Zp(Unknown Source) at burp.Zy9.ZG(Unknown Source) at...

Last updated: Jun 26, 2023 08:18AM UTC | 3 Agent replies | 3 Community replies | Burp Extensions

Burp File Size - Extension data vs Persistence

Hi, Im having some issues with Burp file sizes due to extensions, but I'm confused as to the cause. I have an extension I created that is causing Burp files to balloon to 20x their normal size. As this extension makes...

Last updated: Jun 23, 2023 12:15PM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Failed to download Bapp File

I encountered an issue while attempting to install a plugin from the BApp store as the Bapp File failed to download. Interestingly, when I utilize the URL "https://portswigger-cdn.net/bappstore" in my personal browsers such...

Last updated: Jun 23, 2023 10:38AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Importing external JFreeChart library - ClassNotFoundException

Hi, I'm developing a Burp extension in Montoya, and I'm using the external JFreeChart library to implement some graphing functionality. I have added it as a dependency in the following way: In the project...

Last updated: Jun 21, 2023 08:54AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Turbo Intruder error

Hi everyone, I've just downloaded Turbo Intruder and was about to use it for the first time. I chose one of the easiest lab for this...

Last updated: Jun 21, 2023 06:54AM UTC | 5 Agent replies | 7 Community replies | Burp Extensions

Why do my built in lists in Burp have {Base} in the payload and how do I use them?

So, in Intruder if I load certain built in payload lists (like the SQLi one), many of the requests have an entry like "{Base}' or 1=1--", however then the request is sent to the server like: GET /example.php?id=123{Base}' or...

Last updated: Jun 16, 2023 01:19PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Highlighting in the Text Editor

In newer versions of Burp, the text editor highlights the request and response. Now for extensions it would be nice to "hook" into this process or replicate it in the TextEditor. I've tried to add <html> at the start of...

Last updated: Jun 16, 2023 09:12AM UTC | 3 Agent replies | 4 Community replies | Burp Extensions

Other Extension interference

Hey, I've written an extension that analyses an app's parameters. However, I come across an issue with other extensions such as log4shell everywhere adding the query parameter "action" to every request. I've played with...

Last updated: Jun 16, 2023 08:04AM UTC | 1 Agent replies | 1 Community replies | Burp Extensions

Confirmation of payment for extension of license

Hi, I would like to inform you; we made a payment in total amount of 449,00 USD. Payment is still in process. Could you please give me contact (e-mail address) to whom I could deliver proof of made payment. Thank you in...

Last updated: Jun 15, 2023 07:33AM UTC | 1 Agent replies | 0 Community replies | Burp Extensions

Burp Automation - Scanning for specific vulnerability

Dear, I want to write a burp extension in java, that will use burp scanner. Can we scan a request with specific (user defined) audit configuration in burpsuite professional. Like, extension will check if there is an id...

Last updated: Jun 14, 2023 11:04AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Manual Install of Burp Extension

Hi, I hope I didn't miss it anywhere on the website, but I couldn't find how to install a local Jython extension in Burp through the Manual Install-button in the BApp Store tab. The extension runs fine in...

Last updated: Jun 14, 2023 07:40AM UTC | 8 Agent replies | 8 Community replies | Burp Extensions

Java Deserialization Scanner

Hello, It was checked that Java Deserialization Extension is not working properly anymore. It does not provide correct results while scanning vulnerable to Insecure Deserialization web application. I hope someone can...

Last updated: Jun 12, 2023 07:59AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Sending Request Montoya

I'm trying to send a request with the following code, but getting -1. What's wrong with this workflow? TIA! HttpRequestResponse ret =...

Last updated: Jun 07, 2023 01:00PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Delete specific request from Burp's proxy history using my custom plugin

Hello, Is there a Burpsuite API that could be used to manipulate (or just delete) a specific request/response in the proxy history tab? Appreciate your support

Last updated: Jun 07, 2023 12:47PM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Page 9 of 49

Burp Suite Support Center

Your source for help and advice on all things Burp-related.

Burp Suite Support Center image