How do I? - Page 192 - Burp Suite User Forum

License Activation

Hi I work as a consultant doing security audits for different clients. The clients I usually work with are fairly security conscious and require me often replacing media used during audits, often once an assignment is...

Burp Scan with self signed server's certificate - develoment environment

Hello, Can we use self signed server SSL certificate to run Burp scan? If we use self signed certificate in DEV environment We are seeing SSL certificate issue below. The following problems were identified with the...

Error code: SEC_ERROR_BAD_SIGNATURE

I am getting below error Secure Connection Failed An error occurred during a connection to www.google.com. Peer’s certificate has an invalid signature. Error code: SEC_ERROR_BAD_SIGNATURE The page you are...

Create a scanner based on my proxy usage

Hi, I want to know if there is a way I can create a scanner based on my proxy usage. For example, if I browse to http://www.example.com/test.php?p1=name&p2=age using my web browser, I want burp to scan those and only...

Delete my account

Dear Sir / Mam, I kindly request you to delete my account / profile in port swigger Thank You

Unable to use Burp when connected to VPN

When I try to access websites when connected to Burp using my ciscoanyconnect vpn it doesn't load. As soon as I switch off the VPN it works perfectly fine.But I have to access my office network through vpn to do the testing...

Install burpsuite on Kali raspberry pi

I previously installed Kali on virtual box and this had burpsuite included. But when I installed it onto my raspberry pi, it doesn't come preloaded with burpsuite and I can't seem to install it either. I've tried downloading...

Burp Suite Enterprise GraphQL how do I get counts of all of the vulnerabilities discovered by a scan

I am trying to use GraphQL and C# to look through all of our scans to determine which scans we need to have the developers look and handle any possible vulnerabilities in their websites. I could do this manually using the...

Authentication bypass via encryption oracle logic flaws lab

i am stucked in this last lab of business logic flow. i am not understanding that what are saying from 6th point. any one have any video solution or writeups? help me for solve this lab.

Burp Collaborator Metrics as JSON/XML?

Hi there, We're working on parsing the metrics from the Burp Collaborator Metrics page. It's a pretty simple HTML, but it'd be great if it was something simpler - say, JSON, XML, or some other structured data format....

On-Going Burp problems

Hello PortSwigger i recently upgraded to a new virtual machine operating system named Parrot. Reason is Kali-Linux took a dump on me and i am unable to fix it. Anyway the new system runs well but my problem is Burp-suite...

Dynamic analysis - Cross-site scripting (DOM-based)

After scanning my application I have Cross-site scripting (DOM-based) reported, details below: Data is read from input.value and passed to jQuery.replaceWith. The source element has id BasicData_CertificateIssueDate and...

SQL INJECTION

I GOT AN ERROR(INTERNAL SERVER ERROR) WHILE SOLVING THESE CHALLENGES EVEN AFTER SEEING THE SOLUTIONS KINDLY PLEASE HELP ME 1)SQL injection attack, querying the database type and version on MySQL and...

Burp Entreprise

Hello, I have installed Burp Entreprise whith the server and the agent on the same server. Please could you help me beacause i would add an other agent an this same server ? Thanks you for your...

Only scan for issues with Scan check builder

Hi, I just want to know how can I disable all checks from burp in-built checks and just scan for checks made by scan check builder extension. Thanks Vivek

downloaded certificate expired

Hello I was configuring the certificate in my firefox browser and during the process I noticed that the downloaded certificate expired on 25/07/2020. How can I get a valid certificate? This is a big problem as all https...

Scan a webiste with login functionality don't work

I'm trying to do a scann on a website where I need to login. I have provided username and password when starting the scann, but I can see in Target that it's not acctually getting somwhere. When doing a live task though the...

Using GREP to get certain response.

Hi, I have been using intruder to brute force. How should I get response that does not return 1? I have been using Grep - Match Regex .*(?<!1)$ but it is not working HTTP/1.1 200 OK Date: Tue, 22 Sep 2020...

No more activations allowed for this license

Dear team, I'm facing the issue of "No more activation allowed for this license". Yesterday, after closing Burpsuite, it asked me to fill in the license key. Unfortunately I needed to fill in the license key more than...

Using a Key Code for an Indirectly Purchased Burp Suite Professional License

My company purchased a Burp Suite Professional license on my behalf and emailed me the license key code. At this point, I only have an older version of Burp Suite Community Edition installed. Can you please provide me with...