How do I? - Page 22 - Burp Suite User Forum

Not able to access lab

I am not getting access lab button. I was trying to solve Basic clickjacking with CSRF token protection but I am not getting the access lab button.

Progress reset

Hello! Please reset all my progress to start again. Thank you!

I want to reset all labs to practiceI want to reset all labs to practice

Never get x-cahe: hit on the lab "Targeted web cache poisoning using an unknown header"

Hi guys, After discovering the unknown header with Param Miner extension and trying lot of times, I cannot get in the response x-cache: hit even following the solution in the lab description and searched in other sources....

support cli burp-rest-api

I use scanner api in curl commandline. I don't set header and request body. But its no working. Can you help me please? I use api /burp/scanner/scans/active scanner. curl -X POST \ ...

No more activations allowed for this licence

Hi!! Unfortunately I have had to reinstall my server on several occasions and now when I try to install burp suite, I get the error "No more activations allowed for this license" Could you help me...

Response manipulation

How can i intercept response and do manipulation on it?

Burp Scanner fails to detect easy DOM XSS

I am working on Web Security Academy's "Lab: DOM XSS in document.write sink using source location.search inside a select element." In this lab, when I use Burp to scan...

My exam is expired :(

I bought exam in 2021 and wasn't aware of the requirement to pass it in 1 year time. Is there anything i can do about it? :(

OAuth lab: can't solve Stealing OAuth access tokens via a proxy page lab because of SameSite=lax;

Hi everybody, I'm really sorry to write this but I fried my brains out by trying to solve this lab. I am using an inframe to load the request that has post/comment/comment-form as callback endpoint, from where I can...

How do I see certificate errors in v2024.4.5?

In older versions of Burp, whenever I would proxy traffic and have a certificate pinning issue, on the front page there would be a list of errors or events. Everything has been re-arranged again. For example, when...

Can we intercept tcp/ ip protocol in burp?

Montoya API to list installed extensions?

Is there an api / method to list all installed extensions and their file locations? Thanks!

CSRF where token is duplicated in cookie && CSRF where token is tied to non-session cookie - Payloads work, but unable to replicate behavior.

When coming across these 2 labs I realize that I am unable to test the exploit on myself, even if it works for the victim. I am using the Burp Chromium browser (Version 125.0.6422.112). I've lost some time trying to...

Not able to access lab

Progress reset

I want to reset all labs to practiceI want to reset all labs to practice

Never get x-cahe: hit on the lab "Targeted web cache poisoning using an unknown header"

support cli burp-rest-api

No more activations allowed for this licence

Response manipulation

Burp Scanner fails to detect easy DOM XSS

My exam is expired :(

OAuth lab: can't solve Stealing OAuth access tokens via a proxy page lab because of SameSite=lax;

How do I see certificate errors in v2024.4.5?

Can we intercept tcp/ ip protocol in burp?

Montoya API to list installed extensions?

CSRF where token is duplicated in cookie && CSRF where token is tied to non-session cookie - Payloads work, but unable to replicate behavior.

starting from scratch due to a beginner

Hi, I want to reset all the portswigger labs which i had completed before and start again from scratch.

Can't upload images

How to send two requests where the first response includes a value to be used by the second request?

Vulnerability

license key activation failed

Burp Suite Support Center