Feature Requests - Burp Suite User Forum

AWS Fargate support

I understand that there is support for AWS EKS to run BurpSuite. I was wondering if BurpSuite Enterprise could be run in an AWS Fargate (ECS) or OpenShift?

Export/import Resource Pool configuration in project options JSON

We want to set up a few default Resource Pools so we don't have to recreate them every time a new disk project gets set up. Our process when starting a new project is to import a standard default project options JSON so...

Burp Intruder

Burp intruder provides the option of extracting specific data in intruder results but it has a limit of 100 words only. I tried to grep around 500 words of a token that is being used for the login session but it fails to...

Need to generate auth token after 1 hour, How we can achieve it?

Need to generate auth token after 1 hour, How we can achieve it? Scenarios: We get token from google api and token is valid for 1 hour. Need to capture token and pass to other requests after 1 hour Please help

Reg Free trial

I have requested for Free trial license. But I did not get the free trial license

Free Trial

I have raised an request for free trial. I did not get the free trial license

Content Discovery Queued Tasks

Hi, Could the queued tasks in the Discovery Session have the same functionality as the Scanner Scan Queue? This would allow the user to cancel individual discovery tasks to lower bandwidth/time, or to prioritise...

Collaborator Token definition & "API" Access

Hi, we would like to add two feature requests for private collaborator servers. 1. Please, let us define the base collaborator server sub domain name (and length) 2. Provide an official "API" to access the...

Intruder pause and launch built-in broswer on redirect option

Hi, Is it possible to pause on redirect and have an option to open session built-in browser. Would be useful for MFA or credential attacks where you successfully logon and can continue attacks

Credential Stuffing Intruder Payload

Is there an easy way to go from a list with username:password combinations with a specific separator (i.e. colon) to do credential stuffing. I found in order to do this I could make two individual files (one with usernames...

Add LDAP support to Collaborator

Any thoughts on adding LDAP support to Collaborator? Might come in useful for Log4Shell testing.

API to get repeater history

Hi, we want API to get repeater history. Though burp API provides proxy history API (getProxyHistory), there is no repeater history API. If there is an API to get repeater history, it is really helpful for us to get the...

API to get repeater history

Hi, we want API to get repeater history. Though burp API provides proxy history API (getProxyHistory), there is no repeater history API. If there is an API to get repeater history, it is really helpful for us to get the...

When deploying private burp collaborator, allow ability to add custom DNS records of A type.

Currently as mentioned in the docs: https://portswigger.net/burp/documentation/collaborator/deploying field "customDnsRecords" only allows us to specify optional DNS records of type TXT and CNAME, it makes sense for the...

Suggestions for Burp Collaborator Server config options

Hey support/albinowax, Some suggestions for Burp Collaborator Server config options: - "customHttpContent" for unknown paths to replace that "Burp Collaborator is a service.." default response; - "customHttpContent"...

Burp Pro v2021.8.3 Intruder results not saved into Project dashboard

I encountered a bug where my I paused intruder result to reduce sending all payloads to server as I was lucky to hit the correct response within the first few payloads. After I paused the attack, I went to click Save >...

Selection on Inspector

When selecting text on repeater, on inspector it shows the number of bytes. It would be helpfull to see the number of bytes also in Dec but also in Hex. In particular when performing http smuggling attacks (transfer...

What are some of the features that I wished can be improved on?

HI Portswigger, I was hoping some of these features are already in place: Do correct me if I am wrong 1) Do not intercept - is there a way to blacklist everything else and intercept only the domain that we have...

Burp Enterprise, disable Http/2 requests configuration option

Hello, I've been in discussion with support via email already but wanted to post this here. We have a situation where burp is identifying the application we are scanning uses Http/2 when in actuality, it doesn't and it...

Load saved project from within Burp

Hello, It would be nice to have the ability to load a saved project without having to exit Burp and restart it. Are there any plans for implementing such functionality? Thanks, Anthony

AWS Fargate support

Export/import Resource Pool configuration in project options JSON

Burp Intruder

Need to generate auth token after 1 hour, How we can achieve it?

Reg Free trial

Free Trial

Content Discovery Queued Tasks

Collaborator Token definition & "API" Access

Intruder pause and launch built-in broswer on redirect option

Credential Stuffing Intruder Payload

Add LDAP support to Collaborator

API to get repeater history

API to get repeater history

When deploying private burp collaborator, allow ability to add custom DNS records of A type.

Suggestions for Burp Collaborator Server config options

Burp Pro v2021.8.3 Intruder results not saved into Project dashboard

Selection on Inspector

What are some of the features that I wished can be improved on?

Burp Enterprise, disable Http/2 requests configuration option

Load saved project from within Burp

Burp Suite Support Center