How do I? - Page 129 - Burp Suite User Forum

the web application hacker's handbook answer key

What happened to the answer key for the web application hacker's handbook? The book says to go to mdsec.net/wahh, but it just redirects to this site now.

Intruder Cluster Bomb Iteration Order

So with Cluster Bomb, we can generate various permutations of multiple wordlists across different parameters. But is there a way to choose the order of iteration? For example, let's say that I have the following for...

How to Map or generate Burp suite result with OWASP 10 and WASC (Web Application Security Consortium )

We have one requirement of how to map or generate Burpsuite report with below items 1.Owasp 10 top and 2.WASC (Web Application Security Consortium) 3.Common Weakness Enumeration – Top 25 Software Errors guide;

Android Certificate Issue

Hello, I installed Burp's Certificate on my Android phone to monitor the traffic of an app but now I'm done, every site gives me a certificate error, saying "Your connection is not private". How can I remove the Burp's...

community solution

how can i publish a community solution for the labs?

Scan POST requests using Burp Suite Enterprise Edition

Hi Team, I want to scan custom POST based HTTP requests of my choice using Burp Suite Enterprise edition. How can I do that?

Burp Pro v2022.2 How to minimize number of logging in during crawl and audit

Watching the Logger tab, I notice during the audit phase it's constantly re-logging into the site. When it was auditing one URL it took about 35-40mins. I see for every 2-3 requests it logs in again. It seems like it's...

unable to intercept responce

Hi I’m unable to intercept in IOS 13 device. Forward, Drop, Action are in disable mode.

Update Burpsuite Extension

Hi, Im getting the followig errors when im trying to update my Burpsuite extension "There was a problem processing an update" Manual zip uploading not working as well. Can you please assist?

Burp Pro v2022.2 Are there Scan configuration to prevent auditing same features over and over again

Is there something in crawl/audit configuration that can avoid crawling/auditing the same features over and over again so it doesn't take 10 days or a month to finish scanning? We have features like a discussion page that...

I did not receive burp suite professional free trial license key?

i submitted my business email and download burp suite professional. but still not receive free trial license key on my email?

Certificate errors

Hello I can not download the certificate, all the steps were done correctly, but when downloading the certificate its size is (zero) A picture shows this below. Please give me a solution https://prnt.sc/zIrw7MQvhrxj

MY RESPONSE TAB IN REPEATER SHOWS ERROR '404 NOT FOUND'

Hello, I was trying to complete a lab named Web shell upload via path traversal. The first and fourth step I was able to complete it, but when I got to the fifth step. MY RESPONSE TAB IN REPEATER SHOWS ERROR '404 NOT FOUND'....

using Connection: close instead of zero

in this request : POST / HTTP/1.1 Host: vulnerable-website.com Content-Length: 3 Transfer-Encoding: chunked 8 SMUGGLED 0 tutorial(TE.CL vulnerabilities) says : The front-end server processes the...

téléchargement de Burp Suit

Bonjour à tous, Je souhaite télécharger la version communautaire de Burp, avec l'architecture MacOs ARM, mais quand je clique sur le bouton vert "téléchargement", il ne se passe absolument rien, et aucun téléchargement...

Burp Interception does not work for localhost in Chrome

I can't intercept requests made by Chrome to my localhost site. - Local host site is running on IIS on http://127.0.0.3:80 - Burp proxy lister is default one on 127.0.0.1:8080 - Interception rules are default one as...

Clickjacking Lab # 1

Hi, I aligned the "Test me" button to the div containing the "Delete Account" button perfectly, then stored and delivered the exploit to the victim, but the lab is not solved. Following is the code I used: <style> ...

Authentication bypass via encryption oracle lab

After right clicking on first byte, I am not finding any options for deleting specific number of bytes in decoder. I'me use the latest version of Burp pro. Thanks in advance for the answer.

Facing issues while setting up Burp Agents

Hi Team, I have procured burp suite enterprise trial license. I have one machine where burp enterprise server and agent is installed and on another machine one agent is installed. On burp suite enterprise web...

Why does Burp Suite Enterprise say "Pending License" after adding new agent server?

I just added a new agent server to be used by Burp Suite Enterprise V2021.6. I accepted the agent machine as a valid agent machine and then added one license to this the new machine. The problem is that the original machine...