Feature Requests - Page 55 - Burp Suite User Forum

Randomize Scanning Order Queue

Is it possible to randomize the order of the scanning queue? If not, can I access the queue from Jython? Thanks Jonas

report

Hey, Burp should add a feature to export Report according to OWASP top 10 vulnerability.

Burp suite currently doesn't support IPv6, except through /etc/hosts tinkering (which fails if there are redirects in the application e.g. to absolute IPs). IPv6 is widely deployed in a number of markets and a professional...

Add a hint to proxy error pages about out of scope responses when dropping out of scope requests

Hello, It may be helpful for troubleshooting to add a hint to proxy error pages about out of scope responses when dropping out of scope requests. Users may forget that the under the project options tab, connections...

Dynamically create proxy autoconfig files

Love your product, been using it for over a decade. I just had an idea for a feature that I think would be really interesting and useful. You could dynamically create a proxy autoconfig file that would only proxy items...

suite-wide level traffic blacklist

Hope to add a scope blacklist option."Don't send items to Proxy history or other Burp tools, if in scope black list". and take effect before any other rules that filte traffic. if we just don't want to see noises like...

New Intruder payload processing rules

- Character length - Modify case: reverse/invert case (also in Case Modification payload type) - Reverse string - Trim whitespace (leading, trailing, both)

Intruder: allow negative Step values for Character Blocks, Dates payload types

.

Detailed scanner activity

Hello, it often happens that Burp causes 100% CPU usage when the Static Code Analysis is enabled, which is to be expected to a certain degree. Something that would really help understanding what's going on would be some...

Single thread possibility

Hi, with your new update in changing the # of threads into # of concurrent rate limit; could it be possible to limit Active scan to a single thread? I test apps which often have very complex session management, or...

Content Discovery button for add items to sitemap, or cancel it

Hello. In some cases Content Discovery may find many trash and add it to sitemap. If you don`t wait it, you not uncheck box of automatically site map add items. I think, it`s will be good for button for: 1. Add in sitemap...

burp should support none http proxy

burp should support none http proxy, some application use none http to login, so if i proxy the http request, the application can not login! please handle this problem.

test{{2*5}}

"><img src=x onerror=prompt(2)> <h1>test</h1> x

test{{2*5}}

"><img src=x onerror=prompt(2)> <h1>test</h1> x

option to select/deselect all when picking scan issues

In Scanner / Options / Scan Issues, there isn't a way to quickly disable or enable all issues. I only wanted to scan for SQLi but had to manually click through every other issue to turn it off. An option to turn them all...

User options: Burp collaborator settings

Hello, it would be very usefull to add a "Burp collaborator settings" into the User options and add a standard "override" feature in the project options. The people who has is own collaborator server otherwise have to...

Burp Collaborator Polling server proxy/socks setting

It would very usefull to set a proxy and socks configuration for the polling server of the burp collaborator. Currently no upstream proxy is used. Maurizio

Request chaining

Hi, I'm testing APIs. In the request, I can upload files, and insert plenty of data. Let's name it /person/edit/123. After it succeeds, I'm returned only true/false. Then I need to request another URL to see what data has...

Content Discovery make it more clear what has been discovered

I my opinion it is not clear at all what has been discovered using the Content Discovery functionality. Please make it clear in the sitemap what exactly has been discovered. Perhaps you guys could simply add an extra column...

Force spider engine to wait for page to load (Automated spider)

Hello, I was testing an intensive application this week and noticed that the spider tool wasn't finding a lot of the content on the site. The spidering was done through a scheduled task, so there was no manual browsing...

Randomize Scanning Order Queue

report

IPv6 Support

Add a hint to proxy error pages about out of scope responses when dropping out of scope requests

Dynamically create proxy autoconfig files

suite-wide level traffic blacklist

New Intruder payload processing rules

Intruder: allow negative Step values for Character Blocks, Dates payload types

Detailed scanner activity

Single thread possibility

Content Discovery button for add items to sitemap, or cancel it

burp should support none http proxy

test{{2*5}}

test{{2*5}}

option to select/deselect all when picking scan issues

User options: Burp collaborator settings

Burp Collaborator Polling server proxy/socks setting

Request chaining

Content Discovery make it more clear what has been discovered

Force spider engine to wait for page to load (Automated spider)

Burp Suite Support Center