Feature Requests - Page 33 - Burp Suite User Forum

Custom Macro Parameter in URL Definition

Hi Portswigger Team, I've noticed that more and more websites use a one-time login page. The landing page defines a one-time valid login request. Since the one-time value is in the URL itself and is no GET parameter (I...

exploit server limitations

During doing one of the labs, I encountered a limitation: it is impossible to create two endpoints with different exploits because after saving the last exploit, the previous gets erased. It forces one to try to put...

Ability to mark multiple issues as FP

Hi, We've been auditing issues on Burp Enterprise and found it very frustrating to have to individually mark every issue as FP. It would be great to have an option to select various issues and then apply the FP flag to...

View Issue details from Audit Items

In previous versions of Burp, when issues were detected while scanning a URL, it would show up in varying colors of severity. When you double-clicked that URL item in the scan queue - it actually showed you specific details...

Rendering JSON in pretty form in response body

Hi, Please consider rendering application/json content in response.body in a pretty form. Today, I am forced to copy+paste the content into another tool to view it in pretty form. Thx Chaks

SSO and LDAP integration for Burp Enterprise

After setting up the initial infrastructure and promoting the solution among projects, the team size quickly started to grow and it already became painful to manually manage the user accounts. It would be very beneficial...

Intercepting a Reqest in brup suite of any website that was running through vpn.

I can able to intercept a request in Brup suite of any website that was running through WI-FI but I was unable to intercept a request of website that was running through vpn. Can anyone help me

open burpsuite i get following error

Here I provide full output after I launching Burp Suite : C:\Users\MR-ROBOT\Desktop\Burp_Suite_Professional_2021.2.1_Build_5962>java -noverify -javaagent:burploader.jar -jar burpsuite_pro_v2021.2.1.jar Error: A JNI error...

Change license from one host to another

I need to install the Burp Enterprise and Burp Pro on another servers. At the moment I make the installation it informs that the license is already active.

Cross-domain script include - SRI ignored

The scanner reports Cross-domain script include which is a good point. However, scripts included in the web application with or without SRI are put in the same issue. It could be interesting to have a two different...

reverse shell

Hi I'm not to smart but I would like ask about reverse shell.I see people a lot time telling about it .I only ask it is possible implement this in burp as feature.I see similar tools here...

Pentesting limitations

I am planning to buy a BurpSuite Professional subscription and I would like to know if there are any limitations on the number of tests/pentests that can be done on a single account or on a single machine in a year.

Problem for "Connection Reset"

hello,I have a problem，after I use Brupsuite to capture packets and release packets, I will be prompted that the connection has been reset. At first, I thought it was the website's reason, but it's not. When I capture my...

Problem for "Connection Reset"

hello,I have a problem，after I use Brupsuite to capture packets and release packets, I will be prompted that the connection has been reset. At first, I thought it was the website's reason, but it's not. When I capture my...

differentiate burp releases

https://portswigger.net/burp/releases Can you please release "Early Adopter" with additional prefix? It would be good to have a standard prefix like "pre-release.tar.gz" This is required for Linux distributors and...

filtering in http poroxy history, not only exact string, but also some preceeding/succeeding lines

when searching for a specific string to show up in history, could you make a +-40 lines option to include those requests near the call you are looking for?

Data Base Vulnerability of Burp Suite Enterprise

Hi there! My name is Marcos Almeida, and I'm a cyber security cordinator of Redbelt Security in Brazil. I would like to know if you have a CSV file with all the vulnerabilities that are reported by burp suite...

Add more personal data to grep for in responses

Hi, IIRC Burpsuite looks for CC numbers und SSNs. How about IBANs as a general pattern. Also maybe a configurable pattern (regex or simple) that can be saved and reused would be great. I stumbled over an application...

grep extract redirection

Hi, To configure recursive grep you need to set a grep extract but the extraction wizard doesn't perform a redirection, even when redirections are set in the Intruder config further down. It can be worked around by...

Requesting for a Demo on Vulnerability scanning.

Hi, As we are started a new E-commerce business, so we are looking for a vulnerability scanning tool for our website. If it is possible with Burpsuite then we are ready to collaborate.

Custom Macro Parameter in URL Definition

exploit server limitations

Ability to mark multiple issues as FP

View Issue details from Audit Items

Rendering JSON in pretty form in response body

SSO and LDAP integration for Burp Enterprise

Intercepting a Reqest in brup suite of any website that was running through vpn.

open burpsuite i get following error

Change license from one host to another

Cross-domain script include - SRI ignored

reverse shell

Pentesting limitations

Problem for "Connection Reset"

Problem for "Connection Reset"

differentiate burp releases

filtering in http poroxy history, not only exact string, but also some preceeding/succeeding lines

Data Base Vulnerability of Burp Suite Enterprise

Add more personal data to grep for in responses

grep extract redirection

Requesting for a Demo on Vulnerability scanning.

Burp Suite Support Center