How do I? - Page 210 - Burp Suite User Forum

Incomplete ssl decoding

Hello dear ones I have a problem and thank you very much for guiding me. When I want to sniff the Spotify site with Burp Suite In the data sent by Rikpcha to Google, I can not receive all the decoded data and it shows me...

Authenticates scan for openid applications

Hi, I have a doubt on how to use session handling mechanism for openid applications. I have read the blog (https://portswigger.net/support/configuring-burp-suites-session-handling-rules) here the login page is static and...

Burp Suite Automation

I am trying to automate an API scan using Burp Suite Pro. I am planning to Initiate scans through the REST API and fetch the report through headless burp, as API returns a JSON response, and I need a user friendly HTML...

Intercept Not working

I Downloaded and configured Burp suit Free Edition on my Laptop... Prior, to the day i downloaded it i have being using it but currently now when i click on "intercept" nothing is happening if i must know, what is the...

Basic clickjacking with CSRF token protection

I deleted "carlos" user accidently. Now i can't login as the "carlos" user. I need to login as "carlos" user to complete the challenge. Please help me. If any another login id is available please give me.

Target->SiteMap

What is difference between "Copy URL's in this host" and "Copy links in this host"?

Scan for a specific vulnerability class on a specific parameter

Hi, Is it possible to scan for a specific vulnerability class on a specific parameter? For example, If I have a GET request with a parameter 'id', I would like to test the 'id' parameter just for SQLi? Is there a...

The client failed to negotiate a TLS connection to xxxxxxxxxxxx:443: Remote host terminated the handshake

I try to validation for my company app but it show this message always. I am using Samsung A10 (android 10) .I've installed the Burp Suite certificates which show in user tab. Help me please what is the issue?

Replace string from list

how to replace string that in the request from new string in a list that I will define that list to burp note1 : burp must replace string with new string from list every time note2 : This should happen...

lab

Are my lab login ID and password different from burp suite?

Burp Suite Professional PDF documentation

Hi All, I am new to Burp Suite, I am looking for a complete reference guide or documentation containing the features and how to.

No cart button on some labs

After adding to cart I don't find any cart button to visit. However, visiting to /cart will open cart portal. Many beginners may get in trouble in this. Because, I needed some moments to discover this(/cart).

Unable to Activate Buro using the procured license

Error: No more activation allowed for this license. Kindly Advise.

Unable to use the firefox browser

Hi, I already did the step being posted at the site for the firefox setup with burpsuite. 1. Set firefox network manually to burp suite = 127.0.0.1:8080 2. Download Portswigger CA cert and make it website enable. 3....

Remaining time

Hi, We are were multiple tests using the scanner and we found that every time the scan reaches 95%~97% the requests frequency goes down to 0 for about 20mins (rarely we see 2-3 requests) and the estimated remaining time...

Can't install Burpsuite Community Edition on Kali Linux

Hello, I am trying to install Burpsuite Community Edition but it won't let me. My set up is - Kali Linux 2020 vbox i386 running on Oracle VM VirtualBox Manager on macOS Catalina 10.15.7 I have downloaded the .jar...

how do I put credentials for MFA

Hello, The site we tried to crawl and audit is MFA enabled. How does that work? Thanks, Fusheng

Excluding an endpoint for specific type of scan attack

Is it possible to exclude a specific endpoint to be excluded for only speicific type of scan attack test? E.g. when I perform scan for URL http://foo.company.com, we find two issues at /myWebApp endpoint. Issue-A -...

Installing in Linux based distros

Which Linux distribution is the best for installing Burp Suite?

Assistance With Private Collaborator Setup

Hello, I have been trying to set up a private collaborator server using a domain purchased at Amazon Route 53 that points to a Digital Ocean Droplet. I have changed the nameservers in Route 53 to point to DigitalOcean...