Feature Requests - Burp Suite User Forum

intercept indicator directly on the Proxy tab

As far as I can tell the only visual indicator for whether intercepting is currently enabled is on the Intercept subtab itself under the primary Proxy tab. It would be incredibly cool to include a small indicator on the...

Intruder scan auto stop or pause option

Hi I was not able to find any option which will stop or pause the intruder scan after N number of failed requests. There is one option to pause the Burpsuite's Audit for such case but not for intruder. Sometimes while...

No more activations allowed for this license

I got a license key for the burp suite from my company, but i used it in different vms and i got this error ... Can we find a solution for this? Maybe one or two more attempts could help. Thank you so much in...

Data from ceritified burpsuied is expired.

Dear Support, The burpsuite certificate is generated with an expired date, therefore I cannot intercept the traffic correctly. Log from certified burpsuite: ---------------- Date from certified...

Delete Account

Hi Team, Can you please delete my account, I accidently created two account with different email. Need to delete this one. Thanks in advance.

Extension API for WebSocket

Hi, more and more applications every day use WebSockets. In order to handle everyday assessments, it could be great to be able to be able to add Extensions also related to WebSockets, like IHttpListener to tamper traffic,...

account remove

Hi team, I request you to delete my account associated with elianpullen03@gmail.com Bye

Burp saved file getting corrupt

Hi, Whenever I am saving a file with Burp and continue working on it or open it after closing, I am getting a prompt: Selected file is corrupted and can't be opened. As a solution, it is asking to repair the file and...

CICD SARIF Output

The generic driver can already be wrapped by a Github action and be made to kick off scans on repo push or other events. However the current output options are not developer friendly in that it requires digging on their...

Add time counter between Intruder requests (initiate an Intruder request every x seconds/minutes)

Hello there, I would like to request a new feature be added to Intruder. I have come across web applications that use the time between requests to control against brute force attempts. As an example, if a user account has...

Save Intruder Tabs On Exit Just Like Repeater Tabs

Can you please add the ability to save Intruder Tabs on Burp application close just like the Repeater Tabs are saved now. So that the intruder tabs are saved regardless if they are marked as "finished attacks"? The way me...

Add Scalable Windows Icons

I'm currently using a 4k monitor with 225% scaling on Windows 10. I'm using burp user options file user.vmoptions with -Dsun.java2d.uiScale=2.5 option. The following icons in Burp look pixelated using such configuration, +...

Trial license key

Hi, I want to try burp professional. Had sent request for trial version license key but haven't received any response yet. Please update me what I need to do for this. Thanks

Multi-request payloads in intruder

It would be neat to have multi request payloads in intruder. It could work somewhat like the current burp macros, where you can set up a sequence of requests to send, but the intruder would change some parameters. This is...

Persist column order of Proxy -> HTTP history tab in project or user settings

Hi, In Proxy -> HTTP (WebSocket) history tab I can change the order of columns so the columns I want to see goes first (e.g. URL, request time, ...) and others goes after. However this order isn't preserved between Burp...

Keyboard shortcut in Repeater tab

There is ctrl+f in the Proxy tab which is very handy. Please add this shortcut to Repeater tab as well. Thanks in advance.

websockets 'Send to' repeater & intruder

More and more of the Web apps I am pen-testing rely on Websockets for their main communication channel, and vector for XSS/sql-injection/CSRF etc. This would be very helpful if the functionality existing that exists for...

Make CTRL-G a shortcut for the "GO" command in repeater

Please add CTRL-G as a shortcut for the "GO" command in repeater to allow quick resending of a payload.

Make saving Intruder attacks more intuitive

When user saves Intruder attacks in project file, it saves with a default name and number, which doesn't provide much context It would be good if: - Burp requests for the name to save the intruder attack as, in the...

Any plan to create labs for JWT vulnerabilities in the Academy?

As per subject :) Thank you