How do I? - Page 103 - Burp Suite User Forum

Force Burp Intruder to use HTTP/2 and "Allow HTTP/2 ALPN override"

Hi together, is it possible to configure (force) Burp Intruder to use HTTP/2 with the "Allow HTTP/2 ALPN override" option? I can set this up in Burp Repeater but i am unable to find something in Intruder.

Can't get "Check session is valid" session handler to actually take action (Prompt for in-browser session recovery)

I'm trying to get Scanner to work with a site that uses the b2clogin.com IdP, which the login recorder doesn't seem to support. In Project options > Sessions > Session handling rules I have a rule whose Tool scope is...

how can i scan URL using command pro

how can i scan URL in command pro

How can I export Burp Scanning Configuration. I see only import option, there is no export option

In Scan --> Scan Configuration, there is no export option, for the scanning configuration. How can I export it to JSON format?

"No more activations allowed for this license"

I wasn't aware that there was a limit on activations. I have installed and activated BurpSuite Pro on several devices and VMS, and am running into this error when trying to activate on a new OS install. Can someone...

how can I scan project in burp suite using commnd

how can i take burp suite in my automation suite which is daily basis I scan the project throw command line and get result ?

Blind SQL injection with out-of-band data exfiltration

Hi Team! I am struggling with the burp collaborator client. Step1: I press the "copy to clipboard" button and get the following: rkfb4oeenx9ev7hi0i8nuor1csii67.oastify.com Looking very different than the link...

Setting default proxy listener port

Hi! We are using Burp in shared environment and would like to set default listening port that would be different for each user. Is this possible in the current version onf Burp? I know in ~/.BurpSuite/UserConfigPro.json...

NOT FOUND ERROR

Help me!!! When trying to proxy all of your Web Academy labs it say not found. "https://portswigger.netweb-security/web-cache-poisoning/exploiting-design-flaws/lab-web-cache-poisoning-with-an-unkeyed-header" ==...

Burp Intruder Usage

Is is possible to run intruder in such a way that i could set some time delay of like 30 secs or a minute after a specific number of requests..For example let's say I'm running intruder with 100 payloads that generates 100...

Extender API no method to get Issue references

Hi! I'm developing an extension but couldn't find a way to get the Issue References. I found https://portswigger.net/burp/extender/api/burp/IScanIssue.html but there is no information regarding References.

Match and Replace for a specific endpoint?

Is there a way in Burp, or is there a Burp extension, to do a "Match and Replace" but only for specific URLs? Use case: I'm trying to figure out which properties of the JSON responses coming from an API can be used for a...

Lab: SQL injection attack, listing the database contents on non-Oracle databases

Hi, I am trying to do and wanted to check the list of tables, so I tried the UNION SELECT * FROM information_schema.tables and the response was Error 500. I tried the same command in an SQL sandbox and it totally worked....

Burp Suite Enterprise Installing over Terminal

Dear Support, I am looking for a way to install Burp Suite Enterprise Edition on my Linux Web Server. Possible to install over ssh / terminal? Currently i don't have found a documentation.

Intercept Request that Accepts Null Values

On body I have json like following: "date":{"id":null,"newDate":"2022-09-02","code":32} Previously, I tested the site and there was flaw on the id value that I can be changed to previously used id and the its date and...

Password reset poisoning via dangling markup Lab

Hello, I tried doing this lab and i was not able to complete it.. I tried with the given solution as well on both firefox and chrome, still it didn't work. Has there been any browser update regarding this that blocks the...

license

I'm thinking about purchasing the pro version I wonder if it is possible to install it on another computer with a license key when I have to format the computer after installing burpsuite

No more activations allowed for this license

Hi, I tried to activate my Burp Suite Professional license on a new VM but encounter "No more activations allowed for this license" error. Could you help provide some additional activations? Thank you.

"No more activations allowed for this license"

Dears, I added the activation keys to 2 PC and 2 VMs, and now I need to reset or deactivate the keys so I can use them on new hosts, is this possible?

Understanding Certainty Levels

Hello, I have been reviewed our vulnerabilities inside of our Burp Suite Enterprise instance and noticed the different certainty levels and researched their meaning but I had a question. There has been some cases where my...

Force Burp Intruder to use HTTP/2 and "Allow HTTP/2 ALPN override"

Can't get "Check session is valid" session handler to actually take action (Prompt for in-browser session recovery)

how can i scan URL using command pro

How can I export Burp Scanning Configuration. I see only import option, there is no export option

"No more activations allowed for this license"

how can I scan project in burp suite using commnd

Blind SQL injection with out-of-band data exfiltration

Setting default proxy listener port

NOT FOUND ERROR

Burp Intruder Usage

Extender API no method to get Issue references

Match and Replace for a specific endpoint?

Lab: SQL injection attack, listing the database contents on non-Oracle databases

Burp Suite Enterprise Installing over Terminal

Intercept Request that Accepts Null Values

Password reset poisoning via dangling markup Lab

license

No more activations allowed for this license

"No more activations allowed for this license"

Understanding Certainty Levels

Burp Suite Support Center