How do I? - Page 108 - Burp Suite User Forum

CSRF

I have a question about some webapplications that for changing passwords of users need to users enter their old password: If a webapplication requier old password of users is it possible to reset a victim's pasword through...

some questions about using burp suite professional

Hello. I have some questions about using burp suite professional . My questions : 1)How to fix high memory usage of Burp suite professional ? It uses decent memory and computer freezes while Burp suite is working. I have...

Not able to replay recorded login sequence for my site.

When I replay the recorded sequence it just sticks on the page loading and does not go forward. In the browser console it gives me following error: ``` workbox-window.js:208 workbox DOMException: Failed to register a...

I cannot login using the credentials, weiner:peter

I was trying to solve the labs. but for some reason, I cannot login to the webapp using the given details, weiner:peter

I cannot login using the credentials, weiner:peter

I was trying to solve the labs to learn about the cors vulnerability. but for some reason, I cannot login to the webapp using the given details, weiner:peter

Certificate

When downloading the certificate for burpsuite on kali linux on firefox i get this error message after trying to import the certificate onto the manager within firefox. "This personal certificate can't be installed because...

burpSuite proxy+arpspoof - does not work completely.

Good day perhaps the question is not about burpSuite - but about a bunch of two utilities and iptables settings, but probably people who use burpSuite as a proxy have enough experience in just such a...

How do an authenticated audit only scan using the recorded login?

I can do an authenticated crawl and audit. When I tried to audit only for a URL later, there were no options to select a recorded login. Is that not possible?

Offline Password Cracking Lab Question.

Lab URL: https://portswigger.net/web-security/authentication/other-mechanisms/lab-offline-password-cracking Hi. I have a question that how are we able to obtain the cookie of the user carlos when he has never logged...

Burp suit forwarding

absolute noob to this, why do I need to spam click the forward button for every action I want to do in the built in browser?

Avoid character &

Hello, Is there a way to avoid the "&" character in Repeater when using HTML encoding? For example, to exploit XSS via this encoding (as mentioned here...

Burp Suite not working in console

I am using Windows 10. To limit ram in Burp Suite, I need to run the following on the console. "java -jar -Xmx4g burpsuite_pro.jar" but I can't run it. I am getting an error like...

Refund

Hello PortSwigger please we need to Refund your product we take it from less than one month ago and it's not helpful to us so we need to refund it Best Regards

Return the money

Or give me the product I paid for! or refund your money!

Web Security Academy

Hi Team, I have registered Web Security Academy free training. Which project i have to use in order to complete all my labs. Thanks Lalitha

Turbo Intruder usage

Please, I'm currently learning Turbo Intruder and Burpsuite session management with Macro. First - Is it possible to use my macro rules on Turbo Intruder, I've tried but to no avail. Second - How do I use Turbo...

Can't get DNS TXT record from Burp collaborator

I can't dig the TXT record from the Burp Collaborator server. dig returns empty answer section $ dig txt dobc.mmquant.net @165.22.xx.xx ... ;dobc.mmquant.net. IN TXT I can see the DNS requests in the Burp...

how can i find other labs or websites for practicing HTTP request tunnelling ?

i know i can use labs in portswigger to testing vulnerabilities but for HTTP request tunnelling i need to practice more than that is there any other labs or online sites to do some attacks like that? i have onother...

intercepting django website in local host

i'm using django in this address: 127.0.0.1:8000 i want to intercept it with burp suite how can i do that?

Brave Browser not importing Certificate

Hello, i downloaded the certificate file from burp suite, but when i am trying to import the certificate in Brave Browser, it does not show the cert.der file (in SSL Client Certificates category) and when i switch to show...

CSRF

some questions about using burp suite professional

Not able to replay recorded login sequence for my site.

I cannot login using the credentials, weiner:peter

I cannot login using the credentials, weiner:peter

Certificate

burpSuite proxy+arpspoof - does not work completely.

How do an authenticated audit only scan using the recorded login?

Offline Password Cracking Lab Question.

Burp suit forwarding

Avoid character &

Burp Suite not working in console

Refund

Return the money

Web Security Academy

Turbo Intruder usage

Can't get DNS TXT record from Burp collaborator

how can i find other labs or websites for practicing HTTP request tunnelling ?

intercepting django website in local host

Brave Browser not importing Certificate

Burp Suite Support Center