How do I? - Page 227 - Burp Suite User Forum

Why does the exploit for "Lab: Reflected XSS in a JavaScript URL with some characters blocked" work?

In this lab the infected code will look like this: <a href="javascript:fetch('/analytics',...

Lab Not Funtioning Well

I am Trying to solve Lab: Exploiting HTTP request smuggling to capture other users' requests.But Always It only contains my own csrf and session cookie . I told you 2 days ago.Please try to solve this lab. i Tried 20...

problem cert with android

hello i have problem when install cer in android The client failed to negotiate a TLS connection to fds:443: Received fatal alert: certificate_unknown i try solved with this article...

Resource management

Hi community, i have a question regarding RAM usage, as far as i know burpsuite will take half of the RAM of the machine to crawl and audit, but i was wondering if is there an option to increase the amount of RAM singed to...

Lab Login Not Working

Lab: Exploiting HTTP request smuggling to capture other users' requests i GOt the session cookie and csrf too but i am not able to login session=IaHcO3qG7jv7aC03vFVa60keMi1kYNAG...

Automatic invocation of __destruct method

I was doing this challenge https://portswigger.net/web-security/deserialization/exploiting/lab-deserialization-arbitrary-object-injection-in-php And as I read the solution (the ";" character at the end was missing in my...

Lab Not Responding

I am Doing Practice on Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria Lab But Alert doesnt calling out. i Tried 10 times at regular interval but that didn't work. X-Cache:...

Burp could not obtain file lock of project file

Dear team , I am receiving the same error as mentioned in the following post: "Embedded DB: the embedded database requires file locking which is not supported by the selected data directory burp...

Burpsuite_Pro_v2020.4.1 installation error

Hi , When i try to open Burpsuite_Pro_v2020.4.1 by clicking on the jar file , it gives me an error : "A JNI error has occurred ,please check your installation and try again " and i have java version "1.8.0_251" installed...

Lab Not Responding

I am Trying to solve Multistep CLickjacking lab. both buttons are aligned but the lab is not solving here what is my exploit script:- <style> iframe { position:relative; width:500px; height:...

Run a scan

1- Have a list of 5 target websites 2- For each site unable to run a scan as the option is greyed out and cannot select

Burp Suite Enterprise - Create a Site with referrals to other URLs

We recently purchased Enterprise and I have noticed that Burp only scans the initial site that contains the SSO / authentication, then stops. I have then put the URLs into the site URL section that the page refers the user...

Web cache poisoning with an unkeyed header

Asslamu alikum to all I tried "Web cache poisoning with an unkeyed header" lab many times, but I am not getting X-Cache:Hit from the server can you check if everything is fine with the lab cause given solution did not work...

Can you edit vulnerability severity on Burp Enterprise?

Hi! I was looking at some scan results on Burp Enterprise and was wondering if a vulnerability's severity could be lowered. i.e. an XSS on an internal web app is lower severity than on a publicly accessible web app. I...

need trail version burp suit

Hi Team, I could not download burp suite trail version. Provided all the details again asking company address required message. how can i get trail version. please help me. Thanks. Navaneetha krishnan A

Move license into another device

Dear Team, I have an issue when trying to activate a new device. I got the following message: "No more activations allowed for this license" I uninstalled it from my Macbook and tried again but it didn't work. How...

burp install problem

hello sir, i am using ubuntu 32 bit and i don't have too much money to afford burp license . can you plz help to install burp community version on my machine

User credential visible over https communication

Hello, I have recently started using burp suite community edition and i started learning request/response interception using proxy. During the practice i noticed one thing. I was trying to intercept the request of a...

Encounter Error: connection refused when run the generic CI driver locally

Hi team, I run into an issue when I try to run the CI driver locally, I use the burp-ci-driver-1.0.5beta.jar because this version does not require self-signed-certificate, but when I run the scan command, my terminal...

I’d like to make sure that employee other than me get support.

Hi support team, I am Chiaki Oigo of dotData, and registered my email address, chiaki.oigo@dotdata.com, as a licensee for paymant. However, the actual user is another employee. Therefore, I would like to be able to get...

Why does the exploit for "Lab: Reflected XSS in a JavaScript URL with some characters blocked" work?

Lab Not Funtioning Well

problem cert with android

Resource management

Lab Login Not Working

Automatic invocation of __destruct method

Lab Not Responding

Burp could not obtain file lock of project file

Burpsuite_Pro_v2020.4.1 installation error

Lab Not Responding

Run a scan

Burp Suite Enterprise - Create a Site with referrals to other URLs

Web cache poisoning with an unkeyed header

Can you edit vulnerability severity on Burp Enterprise?

need trail version burp suit

Move license into another device

burp install problem

User credential visible over https communication

Encounter Error: connection refused when run the generic CI driver locally

I’d like to make sure that employee other than me get support.

Burp Suite Support Center