Feature Requests - Page 27 - Burp Suite User Forum

Blind SQL lab.1

Hello everyone, I started to go through blind injections and ran into a misunderstanding of some requests ... ... Here: xyz' AND '1'='1 …xyz' AND '1'='2 I don't understand what those quotes ' ' are, in the first...

Lab quick restart feature

Hi, I want to ask if there is a way to quickly restart a lab? It is sometimes inconvenient to wait 15m for a lab to restart. Best regards

Create folders in repeater tab

Hi Portswigger, I use BurpSuite professionally every day, and I would like to request a feature that I have been missing for a long time. Would it be possible to include a way to create folders in the Repeater tab? This...

Import Burp Professional scan into Burp Enterprise

I would like to be able to import a burp scan (pro) into Enterprise, to use the tracking metrics and reporting features of Enterprise. Is this possible already?

Query sanitization

I heard if i use query sanitization sql injections don't work. so my question is : Is query sanitization also can prevent blind sql injections?

Option to create NSS key log file

It would be great to have an option in Burp to create a NSS Key Log file (https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format), it would really help debugging problems with SSL client certificates...

Proxy: "Match and replace" target IP address/port of request (not just Host header)

A new dropdown would be necessary. Would be handy to have a tick box to automatically do the host header also Thanks!

Latest on Burpsuite Pro/Enterprise and scanning Single-Page Applications?

Portswigger, I've seen various posts regarding Burpsuite's scanning abilities for SPAs. Can you provide an update on what improvements have been made, current scanning capabilities for SPAs in Pro & Enteprise and what...

Burp Intruder

Burp intruder provides the option of extracting specific data in intruder results but it has a limit of 100 words only. I tried to grep around 500 words of a token that is being used for the login session but it fails to...

AWS Fargate support

I understand that there is support for AWS EKS to run BurpSuite. I was wondering if BurpSuite Enterprise could be run in an AWS Fargate (ECS) or OpenShift?

Need to generate auth token after 1 hour, How we can achieve it?

Need to generate auth token after 1 hour, How we can achieve it? Scenarios: We get token from google api and token is valid for 1 hour. Need to capture token and pass to other requests after 1 hour Please help

Reg Free trial

I have requested for Free trial license. But I did not get the free trial license

Content Discovery Queued Tasks

Hi, Could the queued tasks in the Discovery Session have the same functionality as the Scanner Scan Queue? This would allow the user to cancel individual discovery tasks to lower bandwidth/time, or to prioritise...

Collaborator Token definition & "API" Access

Hi, we would like to add two feature requests for private collaborator servers. 1. Please, let us define the base collaborator server sub domain name (and length) 2. Provide an official "API" to access the...

Intruder pause and launch built-in broswer on redirect option

Hi, Is it possible to pause on redirect and have an option to open session built-in browser. Would be useful for MFA or credential attacks where you successfully logon and can continue attacks

Credential Stuffing Intruder Payload

Is there an easy way to go from a list with username:password combinations with a specific separator (i.e. colon) to do credential stuffing. I found in order to do this I could make two individual files (one with usernames...

Add LDAP support to Collaborator

Any thoughts on adding LDAP support to Collaborator? Might come in useful for Log4Shell testing.

API to get repeater history

Hi, we want API to get repeater history. Though burp API provides proxy history API (getProxyHistory), there is no repeater history API. If there is an API to get repeater history, it is really helpful for us to get the...

API to get repeater history

Hi, we want API to get repeater history. Though burp API provides proxy history API (getProxyHistory), there is no repeater history API. If there is an API to get repeater history, it is really helpful for us to get the...

Suggestions for Burp Collaborator Server config options

Hey support/albinowax, Some suggestions for Burp Collaborator Server config options: - "customHttpContent" for unknown paths to replace that "Burp Collaborator is a service.." default response; - "customHttpContent"...

Blind SQL lab.1

Lab quick restart feature

Create folders in repeater tab

Import Burp Professional scan into Burp Enterprise

Query sanitization

Option to create NSS key log file

Proxy: "Match and replace" target IP address/port of request (not just Host header)

Latest on Burpsuite Pro/Enterprise and scanning Single-Page Applications?

Burp Intruder

AWS Fargate support

Need to generate auth token after 1 hour, How we can achieve it?

Reg Free trial

Content Discovery Queued Tasks

Collaborator Token definition & "API" Access

Intruder pause and launch built-in broswer on redirect option

Credential Stuffing Intruder Payload

Add LDAP support to Collaborator

API to get repeater history

API to get repeater history

Suggestions for Burp Collaborator Server config options

Burp Suite Support Center