How do I? - Burp Suite User Forum

Dynamic analysis - Cross-site scripting (DOM-based)

After scanning my application I have Cross-site scripting (DOM-based) reported, details below: Data is read from input.value and passed to jQuery.replaceWith. The source element has id BasicData_CertificateIssueDate and...

SQL INJECTION

I GOT AN ERROR(INTERNAL SERVER ERROR) WHILE SOLVING THESE CHALLENGES EVEN AFTER SEEING THE SOLUTIONS KINDLY PLEASE HELP ME 1)SQL injection attack, querying the database type and version on MySQL and...

Lab: Modifying serialized data types

I have a problem with this perticular lab. I've followed the solution as well and still cannot access the admin account. I have a firefox web browser. Pasted in this in the cookies by pressing...

Requests showing -1 status and response length

Requests not returning any response after executing. When i installed logger++ , it shows me Requests showing -1 status and response length.

Burp Enterprise - Webgoat scan

Hello guy's ! I have burp enterprise demo version ( we bought the full one but on the development server I use the trial version) and start a scan on Webgoat. It seams to me that the scanner don't connect to the...

Burp Entreprise

Hello, I have installed Burp Entreprise whith the server and the agent on the same server. Please could you help me beacause i would add an other agent an this same server ? Thanks you for your...

Only scan for issues with Scan check builder

Hi, I just want to know how can I disable all checks from burp in-built checks and just scan for checks made by scan check builder extension. Thanks Vivek

downloaded certificate expired

Hello I was configuring the certificate in my firefox browser and during the process I noticed that the downloaded certificate expired on 25/07/2020. How can I get a valid certificate? This is a big problem as all https...

How do I change the Burp browser from chromium to Firefox?

Everytime I click open browser it opens the default chromium browser however if I search something in chromium it just loads infinitely, is there a fix for this and how do I change the browser to Firefox or anything else I...

Scan a webiste with login functionality don't work

I'm trying to do a scann on a website where I need to login. I have provided username and password when starting the scann, but I can see in Target that it's not acctually getting somwhere. When doing a live task though the...

Using GREP to get certain response.

Hi, I have been using intruder to brute force. How should I get response that does not return 1? I have been using Grep - Match Regex .*(?<!1)$ but it is not working HTTP/1.1 200 OK Date: Tue, 22 Sep 2020...

No more activations allowed for this license

Dear team, I'm facing the issue of "No more activation allowed for this license". Yesterday, after closing Burpsuite, it asked me to fill in the license key. Unfortunately I needed to fill in the license key more than...

Use burp suite to test application which uses Social Logins (like Google , LinkedIn)

Hi, My application uses social login (Google,Linkedin). I want to run a live scan and want burp to be able to scan the protected parts of the application as well. I am not able to find a document which guides on this. Is...

Using a Key Code for an Indirectly Purchased Burp Suite Professional License

My company purchased a Burp Suite Professional license on my behalf and emailed me the license key code. At this point, I only have an older version of Burp Suite Community Edition installed. Can you please provide me with...

Lab: Broken brute-force protection, multiple credentials per request CSRF Token issue

When trying to do this lab whenever I send any credentials I get the following error. "Invalid CSRF token (session does not contain a CSRF token)" Even when I just send one credential as a test to see the format. Is...

renew burp licenses

Hi Team, I wanted to renew burp professional licenses of mine. Please help

Cant Intercept the complete URL

newbie question im trying to intercept request in lab but its not getting the complete URL. pls. check this. https://prnt.sc/ulbnrf i tried other websites it works fined.

Any way to generate Burp Reports in XML format with Burp Enterprise?

Basically what the subject says, I need to generate a report from Burp Enterprise in XML format. The documentation doesn't seem to specify whether or not it is possible.

Burp embedded browser Feature - Chromium sandbox issue

Hi team , Thanks for the embedded browser feature on burp . I was running burp on linux instance, Getting error while accessing burp embedded browser feature (v2020.7) Error message : "...

Wow Where do I start as a beginner? On Web Security Academy??? Help plz

I'm a little overwhelmed with the Academy page. Is there an order to follow and build on? Where do I start as a beginner? On Web Security Academy??? Help plz