How do I? - Page 24 - Burp Suite User Forum

Website Dark Mode

How do I turn on Dark Mode in PortSwigger Website?

Ran into a fairly interesting dilemma, I am logged into the lab as the user and my code has been created on the exploit server, however, when clicking "view exploit" the iframe is framing over the non-logged in version of...

Reactivating the license on every start

I installed BurpSuite Pro an a Windows Server. I do not have a profile on this Server. When i log on, there will be created a new temporary profile. Everytime i start Burpsuite, i must activ it again. Today there is a...

Save Time column position to the left

I prefer "time" column to be on the left side just like Wireshark. However, I can't find an option to make it persistent. Whenever I close Burp, the time column will back to the most right side and I have to manually drag it...

OpenAPI parsing error

We seem to be having problems importing our OpenAPI v3.0.x file into the BURP Professional suite. The error reports a syntax error in the file itself. But does not specify what line is causing the issue. I've switched...

How do I view items export from Burp's proxy's history?

Greetings. There is a feature allowing to save items (HTTP request+response) from the Burp's proxy's history (RMB click on item (or a selection of items), "Save item"). It creates an xml-formatted file on disk in result....

Stealing OAuth access tokens via an open redirect lab

Is it possible to get invalid access tokens in the access log? I've been stuck on this lab for hours and got two access tokens, both rejected upon submission. Following the tutorial over and over, cannot figure out what I'm...

Lab - Exploiting Java deserialization with Apache Commons

Hi! I'm trying to solve this lab (Exploiting Java deserialization with Apache Commons) but i can't. First, i tried with ysoserial (like in the description of the lab is told) but when i send the request i get a 200 Ok...

Authenticated Active Scan using Session

Hi, I have a question about the BurpSuite Pro active scanner. When in the repeater tab, I have the option to right click on a request and select "Active Scan", which subsequently kicks off an active scan in the dashboard...

Activation Failed

Hi, i have burp professional on my laptop and i want to install it also on my desktop pc but when i try to activate burp, it says: "No more activations allowed for this license.". I read that one license can be used for...

reset all labs

Hi, I want to reset all the portswigger labs which i had completed before and start again from scratch

Burp Intruder Bruteforcing too slowly

Hi, I see that Burp Intruder is bruteforcing at the rate of 1-5 seconds per request. This means that in a minute I can do roughly 12-60 requests. This seems to be way too slow, is there any way to speed up...

RE: Inquiry on Render Feature in Burp Repeater

In Burp Repeater, you can render the response returned from the server - does this mean that any JavaScript included in the response is also executed? Or is it only the HTML that's being rendered in order to get a visual...

How to resolve the 'Out of scope' issue and handle 301 and 302 status codes

While running a pre-scan check in Burp Suite Enterprise, we are getting a connection status of 'Out of scope' and it reports '301 Moved permanently' and '302 Found'. How can we resolve this? Please help with this

how to Scan API website

Hi Team I want to Scan My API website, but it inform "No valid server URLs found. Make sure that the definition includes a servers array and that servers are listed as absolute URLs." i done know how to scan it, please...

Lab: CSRF where token is not tied to user session

I've been doing this lab, and I've almost made it. However, when making the PoC it wont get resolved. It looks like this: <form method="POST"...

Is it possible to get a collaborator URL already in use??

Hello, Running an assessment today, I noticed that there seems to be a large amount of HTTP traffic hitting the collaborator URL I was using. I wasn't sure if this was from something I had caused from testing, or if...

No exam available

Hi, I tried to start the BSCP, but it's not working properly, after clicking on start the exam in Portswigger and being redirected to Examity, I can't start the exam as Examity says that "There are currently no exams...

Get Ready +971527003139 Meet Independent Dubai Call Girls By Jumeirah Call Girls Downtown

Get Ready +971527003139 WhatsApp Meet Independent Dubai Call Girls By Jumeirah Call Girls Downtown -Meet Girls In Dubai #Dubai, Meet Girls In Sharjah #Sharjah, Meet Girls In Ajman #Ajman, Meet Girls In Abu Dhabi #abudhabi

Not able to download Burp CE

Hello, I am trying to download Burp CE on my windows 10 laptop, but I am not able to do so. I know it sounds really stupid, but I am trying to download it since long. When I am hovering my cursor over the green download...