Burp Suite User Forum
For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.
Hi, In "Burp > Search", it would be great if the search result for repeater can also show the name of the repeater tab and the request number. Additionally, it would also be great if the arrangement of repeater tabs...
We have a need where we need to know when a vulnerability was found, specifically, the date it was first found. Can this be added?
Hello, I have configured a private burp collaborator server on my own VPS and I would like to address some feature requests. 1. I would like to also add custom payloads (static payloads). Example static.collab.server...
Hi. I purchased Burp Suite Pro today. The email i got stated that there was a problem with my order. I checked my orders in my account and there is no record of it. I also checked my credit account and it shows a...
Hi Team, Can we get the Report in CSV or Excel format in Horizantal ? Because it will be easier to work for our developers sort them either by severity or confidence and Request and Response parallelly. Like...
Hi there, I believe that scanner should report all issues. Scanner doesn't report previously found issues for now if same URL path and parameter name. Why does scanner not report that? However there should be the request...
Hello, My name is Ray Brown, I am the new IT Cyber Security Admin with The Helper Bees. I am replacing Anish Aryal. Anish has/had an account setup though you, and The Helper Bees is requesting that the access be...
Hello, I'm trying to pull all issues for a site and can get all I need from the following call but am missing one essential field, the severity. Can this be added? query GetScanIssues { scan(id: 30) { id ...
Hi guys! Would it be possible to develop a browser extension, which allows controlling the interception? Thanks!
It would be great to have the option of grouping issues of a site under the same "main task" and add the issues as Subtasks to that main task instead of getting new tasks for every new finding.
Hi, I'm not sure if it would be technically feasible, but would it be possible for the Collaborator server capture which port (UDP/TCP) was tried to be used? I mean if I simply do ssh XXX.burpcollaborator.net I receive only...
May be very useful while testing for time based injection (sql, command, aso) to see the delay of a response returned by the remote webserver.
Hello Can you add support for client-side parameter enumeration? An example extension takes a list of parameters from the user Then you modify it to be added in the url After that, an iframe is created inside the page,...
Hi, would it be possible to add a Hotkey "Toggle task execution" or something like that? We have Toggle Intercept on/off; but for "Resume task processing"/"Pause all tasks" I'm unable to find hotkey in User options -> Misc...
Gaming accessories - USA retailer of Cases, Screen protectors and other accessories for your Microsoft Xbox One S Controller & XBox 360. https://fommy.com/collections/gaming-accessories
Hi, In Burp-Suite Enterprise, I think it would be interesting to have the possibility to enter a comment when we mark as false-positive an issue so that we can justify why we mark as false-positive this issue. Kind...
When I solve labs they are not showing as solved when I redirect to the learning page.
Hi, Ok, let me start by saying I don't even know how to describe what I am requesting but in a nutshell It would be something similar to the "follow TCP stream" in Wireshark or the Maltego relationship...
Hi, We would like to obtain the documentation of the rest API for burp suite pro. At the moment we use third party website to figure out the possible calls. For example, using the /v0.1/scan endpoint with a URL...
Good morning, While testing both Burp Suite Enterprise and Pro versions, a question arose. If you look at the Scanner function of the Enterprise or Pro version, I know that both perform vulnerability checks based on...
Page 32 of 68
Your source for help and advice on all things Burp-related.