How do I? - Page 141 - Burp Suite User Forum

Is File Upload Vulnerabilitites part of the BurpSuite Practitioner exam?

Hi team, I noticed you recently added File Upload labs. I've been aiming at finishing all Apprentice & Practitioner-level labs to prepare for the Burp Practitioner exam by mid-Dec, following your recommendation on website....

Burp Collaborator Server

Dear Team, Is there any particular URL/ip for burp collaborator server,so that i can give an access in our firewall from organization network.Please also let us know on which port and direction should we give access.

Error installing BurpSuite on Debian GNU/Linux 10 (buster)

I get the following error message when trying to run the Bash script installer. Unpacking JRE ... Starting Installer ... No protocol specified An error occurred: java.lang.NoClassDefFoundError: Could not initialize...

Received fatal alert in my burp suite

Hi team, I am Faccing this type of error in burp events logs 1638876249523 Error Proxy [243] The client failed to negotiate a TLS connection to www.google.com:443: Received fatal alert: certificate_unknown when i am...

Alternative of Spider and Scanner Tab in BurpSuite

Hi, In today's version of Burp, what are the alternative tabs that cover the functionality of the old tabs of Burp i.e. Spider and Scanner?

How to I filter out the amount of internal requests from WebGoat

I have BurpSuite hooked with WebGoat, everything is working normal but WebGoat seems to have so many and rapid internal requests, and BurpSuite picks all these requests and makes me have to forward more than 100 requests in...

bWAPP Automated Scan

Is there any benchmark against bwapp and DVWA? I am currently comparing various automatic DAST vulnerability scanners with DVWA and bWAPP In the test against bWAPP, Burp Professional could not crawl the approx. 140...

Vulnerable Javascript dependency in dataTable.min.js

Hi Team, We scanned our application in burp suite and we got issues in vulnerable JavaScript dependency in dataTables.min.js for .replace, settimeout, data keywords. We detected jquery version 1.12.0, which has the...

How to scan a Single page application using Burp pro

Hi Team, How can I affectively scan a Single page application using burp pro and make sure that i have not missed any parameter or objects within the application. Looking forward for a best...

Freeze ?

Hello PortSwigger i am still using the community edition to test for directory traversal and for some reason after a while the whole application freezes. What could be the cause or should i just upgrade to professional...

Safari doesn't intercept HTTP request

Hello, Burp can intercept all the HTTP requests on Firefox and Chrome, but can't on Safari Can you please help? Thanks.

JVM Error Message

Hi, I am trying to open Burp Suite Professional and I am getting following error: "NO JVM could be found on your system. Please define EXE4J_JAVA_HOME to point to an installed 64-bit JDK or JRE or download a JRE...

Decryptor Configuration tab

Hello, I am looking for the Decryptor Configuration tab and can't find it. Help me, please.

Crawl and Audit do not complete without request timeouts

Hi, I'm fairly new to burp suite. I have gone through the documentation and for a while was using a passive scan while manually testing my application and this seemed to be doing an ok job of reporting things... I thought....

Website App written in Vue JS doesnt render

For some reason the app we have in our website, written in VueJS, is not visible in the Response on Burp. For example if i try to load mysite.com/, Burp will fetch the page but not load it along with the JS components....

Practice Exam

Hello, I have worked my way through a good portion of the labs. I also use Burp Suite Pro and have attempted the practice exam a few times. My question is how do I utilize pro to the fullest because I cannot find the...

exploit servers

what are exploit servers? what does exploit servers do ? how to use them in real life bug bounty hunting?

Cannot access or access very slowly portswigger's lab through burp proxy

Hi, I'd have a problem with burp suite recently. When I access lab without turning on burp proxy, the lab loads very fast but if I access through burp proxy, some requests don't have responses and they turn to Error:"Failed...

Is there any way to make the internal scanner use an external browser or specify a session cookie?

I am trying to run a scan on a web application that is only capable of Single-Sign-On authentication. I am able to access the application only through Firefox; I can not access it through the built-in Chromium browser. I...

burp suite certificate practitioner

Can I use SqlMap, or some tool (ysoserial...) on github when taking the exam?