How do I? - Page 177 - Burp Suite User Forum

What is the meaning of Base installation of External agent machines in General requirements?

Enterprise server, Web server, and Bundled database are installed on one machine, and Agent is installed on a separate machine. Is the base installation of External agent machines correct? Base installation : 10GB Free disk...

Send a set of modified requests automatically

Hi, I am looking for ways to send multiple modified requests to a target automatically. for example, for a request 1) remove a parameter and its value from the request 2) remove only the value and keep the parameter...

BurpSuite coverage for OWASP Top 10 2019

Hello Team, Can you please let me know where i can find the information for OWASP Top 10 2019 vulnerabilities which Burp Suite covers. I found the link for OWASP Top 10 2017...

Unable to save project. The error message says not enough disk space even though there is sufficient disk space.

Hi, How do I send you the diagnostics? Thanks,

Set proxy exclusions when using embedded browser

I have some sites which need to bypass burp entirely for the SSO authentication to work. This is from within a corporate environment where Burp does not support our our forward proxy due to Kerberos authentication. In...

Burp License

Hi, I purchased a Burp pro license about 32 hrs ago and got flagged for manual review. I also sent an email to office@portswigger.net about 8 hrs ago and no response either. How can I get an update on my purchase...

No more activation allowed for this license

I changed my PC, so I tried to activate it on another PC. As a result, No more activation allowed for this license On the previous PC, the license is properly removed from the following GUI. Help-> Clean Burp from...

How do i get a trail for Burp Pro With out a work email address?

I am currently not working for a company. I am self employed and dont have a work email. I was wondering how i can get trail to see if the benefits of pro are worth it?

Intercept mobile app traffic with VPN activated

I'm trying to intercept API calls from mobile app. The issue here is both ios/Android apps using vpn to connect to the server, so communication between them and burpsuite does not exist. Is there a way to configure this?

why do i have to use the concatenation operator when SQL injecting ?

hello . i am doing the sql injection labs . i got stuck on the blind sql injection labs . i got lost when i saw this query on the solution : ''' TrackingId=xyz'||(SELECT CASE WHEN SUBSTR(password,1,1)='§a§' THEN...

Issue Uploading php webshell using Burp Intruder

Stack exchange post here: https://security.stackexchange.com/q/249100/191613

License Purchases

You took my payment, but I didn't receive a license. The email said there was a problem, but not in you processing the payment ... WHERE IS MY LICENSE? I'm trying to get work done. This is the worst payment system...

Discover hidden files and directories

Hi Team I would like ask about how to discover hide directories and files in Burp.I try use some wordlist but this not works for my .Any hide folder can not be find. But If I use some pay commercial online scanner.I see...

Lab: CORS vulnerability with internal network pivot attack

Hii, I am trying to solve the cors lab (https://portswigger.net/web-security/cors/lab-internal-network-pivot-attack) . The first step in lab is to locate the ip address of the endpoint by scanning local network...

Connection Reset Error when using Burp Proxy

Hi, I'm getting "Connection Reset" error in Event Log whenever I try to intercept traffic from Mobile Device(Android/iOS) and it shows no internet in the Mobile(physical device&emulator). Internet connection is working...

parse JSON 【ClassNotFoundException】

Hi: I build a Extension and import a third-library named "fastjson.jar". but when i export this extention as a jar file and load it into Burpsuite , it always rase 【ClassNotFoundException】when parse JSON. I dont...

Confused at a request smuggling lab

Hi, hope everyone is doing well. Can anybody let me know how they completed the lab 'Exploiting HTTP request smuggling to perform web cache deception'. I have tried it a lot of times, and haven't been able to solve...

Using Burp Professional at a customer site

Hello, Me and my Teammates are having a hard time using burp suite professional on customer site when connected with LAN cable with a browser application login needed with a pop up (basic authentication). When activating...

Getting a Certificate not accepted message from call to GraphQL in Burp Suite Enterprise.

This is in reference to the problem reported on https://forum.portswigger.net/thread/i-am-having-a-problem-getting-a-graphql-call-to-be-processed-by-our-burp-suite-enterprise-a953216c. I am trying to get a response to my...

Load balancer not auto populating for cloud AWS deployment

am facing problem when I am trying to deploy burp suite on aws cloud . The last step wherein it states that the load balancer will auto populate is not populating. Through research, I see that the issue has been a...