How do I? - Page 132 - Burp Suite User Forum

HTTP Request Smuggling

I don't understand how the content-length of the smuggler request is calculated in the lab that works as te.cl in request smuggling Can you help me 15 where does it come from? (It accepts limits between 10-15, I get an...

Messages containing serialized objects are not flagged?

Hi! I'm currently working on the serialization labs. A tip on this page: https://portswigger.net/web-security/deserialization/exploiting says the following: "For users of Burp Suite Professional, Burp Scanner will...

HTTP Request Smuggling

Located at https://portswigger.net/web-security/request-smuggling/finding uri The request for "Confirming TE.CL vulnerabilities using differential responses" is given as "POST /search HTTP/1.1 Host:...

Burp API does not include the all issues

Hello, I'm trying to scan testphp.vulnweb.com through the Burpsuite REST-API but I notice that the issues results in the API is 165 but in the UI is more than 300

Is that possible to create a Docker image of Burp Pro?

I am trying to create a docker image of Burp suite, two challenges showed up: 1. How to get a Burp Pro version and load the license in it without UI interaction? 2. I have some my own extensions as Jar files, how can I...

How do I run scans in headless using application login

I recorded a login and confirm it's able to do authenticated crawl and audit I'm a new scan with the UI. I'm trying to achieve an authenticated audit only of the crawled URLs in headless mode is this possible?

Burp Suite not running on 1080 resolution

I don't know but the when i opened the burpsiute it seems little bit distorted , any solution ?

Burp Suite wont run its browser

I am trying to do SQL lab 3 and when I open the browser it will not load the lab on the browser. Can anyone tell me what I'm doing wrong?

An error occured is coming while asking for response for the activation

Hey Team, I am using burp suite pro trial version and I am having its license key. When i try to enter the key and go for manual activation it asks for activation response. Then error message is coming that an error has...

How can I send request from a password reset post to forward to a different email

I am having issues with an old email that I registered on the website and it is impossible to have access to the email since the recovery key is linked to an old phone number which I had. I have formed the following Burp...

How do I run scans in headless using application login

I recorded a login and confirm it's able to do authenticated crawl and audit I'm a new scan with the UI. I'm trying to achieve an authenticated audit only of the crawled URLs in headless mode is this possible?

Crawler not populate certain URL to sitemap

Hi, I am using the Burp Pro, and noticed a weird behavior with Burp. In the Crawler logger, I saw that crawler sent requests to '/api/...', but that 'api' branch never get populate in the sitemap. The crawler is setup...

Viewing saved Intruder attacks (Burp Pro 2022.1.1)

When you close an attack window, it gives you an option to save it in the project file. However, I can see no way to pull up the 'saved' intruder entries after reloading the project. What's the trick?

< auto decode to <

Hi Burp Team, If the response contains HTML special characters e.g (<>') with the HTML tags, they appear in encoded form. Example: ======== <h1>Profile of <class 'type'>!</h1> Is there any way to...

REST API Scanning Using Burp Enterprise

Hi Team, APIs are not web apps where the crawler can be used to automatically discover various links, forms, sub directories and inputs fields. It's kind of point-and-shoot and it provides expected output for a given...

How do I intercept HTTP requests and responses using HMA Vpn with Burp Suite.

Greetings, Please guide me on How to intercept HTTP requests and responses with Burp Suite (Community) while HMA Vpn is on. Thank you in advance.

cookies session collaborator

Hi Team I would like ask about easy question.If I want intercept some cookies session how should looks like line with burp collaborator. ‘“><img src=x...

Lab Solution clarification

Lab: "Reflected XSS into HTML context with all tags blocked except custom ones" <a...

Lab: Username enumeration via account lock server timeout issue

I'm attempting to do this Lab, but whenever the requests reach the 400s, it keeps timing out for me, giving me a 504 error. I've tried breaking up the requests into 20, 25, and even 33/33/34 per attack, but when I do that, I...

Apply for a trial license

Attempting to apply for a trial license of enterprise edition, but not accepting my work email address, being prompted with "Please enter a valid business email address" Can you please assist. zhupeng@cathayjr.com Thank...

HTTP Request Smuggling

Messages containing serialized objects are not flagged?

HTTP Request Smuggling

Burp API does not include the all issues

Is that possible to create a Docker image of Burp Pro?

How do I run scans in headless using application login

Burp Suite not running on 1080 resolution

Burp Suite wont run its browser

An error occured is coming while asking for response for the activation

How can I send request from a password reset post to forward to a different email

How do I run scans in headless using application login

Crawler not populate certain URL to sitemap

Viewing saved Intruder attacks (Burp Pro 2022.1.1)

&lt; auto decode to <

REST API Scanning Using Burp Enterprise

How do I intercept HTTP requests and responses using HMA Vpn with Burp Suite.

cookies session collaborator

Lab Solution clarification

Lab: Username enumeration via account lock server timeout issue

Apply for a trial license

Burp Suite Support Center

< auto decode to <