Feature Requests - Page 37 - Burp Suite User Forum

In Search of a request or response, show which result you're on out of the total number of matches

As an example, in Proxy -> HTTP history, looking at a Response, entering a search term in the "search" box in the bottom of the window will show how many matches there are and you can use the arrows to the left to move...

Do intercept is missing

The option called do intercept is missing from my burp suit and in repeater after i press go in the result page i can not able to make any changes

License transfer

We bought Enterprise edition by PO Receipt date: 05 June 2020 Receipt number: 426891 Order number: B49E5E7B58 - unfortunately is only tied to my colleague's email account : POliphant@cftc.gov and this support is to...

BurpSuite Enterprise - Real time retrieval of credentials from external source (Enterprise Credential Vault)

We would like to see a feature added to the Enterprise product that would allow for the real-time retrieval of credentials (associated with a scan configuration) from an external source. Enterprise security policies often...

Side-by-side View

Hi! Currently, displaying a request+response pair side-by-side is only possible in Repeater ("Repeater -> View -> Left/right split" from the menu bar) or via extensions like Flow or Logger++. I use this layout a lot and...

File Select option in Repeater

Hi, It would be great if we had opportunity to play file upload requests in repeater tab by selecting files. Additionally, that would be additional plus if intruder also supported file related payload list *natively*

Burp Suite Enterprise - Option to collapse all site folders by default

I've been using Burp Suite Enterprise for awhile and have accumulated a lot of sites which are all separated by departments. Currently these site folders are open by default I'd love the ability to collapse all of...

Embedded Browser proxy bypass List

Hi, It would be great if you can make this configurable from Burp project or user options and loaded json options file then it gets added to chromium command flags...

ORDER CANCELLATION

Good day, I was Accidentally Purchase Burp Suite Professional, with order number 4C62B7C014 and 214B135C29, We need only one Account so I would like to request to cancel or make a refund for my second purchase. Thank you.

Default Task Settings

An option to save the settings for Task 1 & 2 to user options would be greatly appreciated. Requiring clicks for every project to change these tasks suite & tools scope is very repetitive.

Didnt get trial license mail

Hi Team, I just got confirmation mail that trial version details were sent however i didnt get any link. Kindly help. BR//Girish

Burp Enterprise advanced URL control

I'm currently trialling burp enterprise at the BBC and am struggling with scoping a scan because I can't use regexs in the advanced URL control for a site. The BBC is heavily TLD oriented so trying to scan /iPlayer means...

automatically install new updates

It would be nice to have a real auto update that does not require to manually launch the installer and clean up dmg files.

Automatic Tab Naming in Repeater and Intruder

When sending a request from the proxy to Repeater or Intruder, if a comment exists, include that in the tab name in Repeater or Intruder. For example, I'm in Proxy and am looking at my initial auth request. I enter the...

Generate CSRF Poc

Hi, PortSwigger Team, Burp produces CSRF Poc, Support json request csrf poc?

Double click for parameter selection

Hello, Until recently, Burp Suite had a very useful feature that allowed the selection of the entire parameter name of value with a double click. Since a few updates ago, this was removed, with Burp Suite now behaving...

REST API | output all results when scanning same URL second time

Hi, I've been playing with the rest API, and found that when you audit the same url twice, the results from the first audit are not included in the results of the second audit. This is highly annoying obviously, as...

Intruder Filter - add "other"/"unknown"/"missing" Filter by status code

When I run Intruder, and I see "Error" in the results, because no response is sent by the server, I can't filter out such items by HTTP code (because there is none). Similar to filtering 2xx, 3xx, 4xx, 5xx could you add 1...

NVIDIA CUDA

Is it possible to add GPU accelerated scanning? It slows to a crawl when actively scanning a website, with CPU being maxed out. Thought if a powerful GPU is used, it would cut down on the time it needs to analyse the site...

Add the path requested in repeater in the target sitemap

Hello, Me and some other people find kinda annoying that the request sent in repeater are not added to the target sitemap. It would be super useful that it does or at least have the option to enable that. Thanks