How do I? - Page 272 - Burp Suite User Forum

Need steps to Record the Jmeter REST API Request

Hi Team - I want to perform security test on REST API services and i'm planning to use burp suite so that it listens to jmeter and capture the web service request which jmeter is sending to server . Also let me know what...

session id

hi I am creating a web application which will b used by many customers of my company.In this application I want to track my session id and protect it from 3rd party users (who act as man in middle and attack session id and...

Headless scan in BURP with bearer token

I am trying to do some automated scanning with BURP in an ervironment that requires token authentication. For this purpose I need to login before each session to get a bearer token. This token is in the body of the login...

No internet connection error when attempting to connect to Google Play Store.

Have cacert.cer installed on Android device and surfing web http and https sites. However when attempting to go to Google Play Store a message there is "No internet connection. Make sure WiFi or cellular data is turned on,...

NTLM Platform Auth Problem

I'm trying to proxy an internal NTLMv1 site using 1.7.13, and I have the appropriate host entries in User Options/Platform Auth, but I'm getting denied by the remote host. I can connect directly using the browser and creds...

Burp Collaborator Server Error Runing

I setup collaborator server with config https://pastebin.com/raw/LmQx27yz, but it is error: http://prntscr.com/k5fyag I have configured iptables, all ports open. I do not know where the error. Thank you so much.

Remote host connection closed during handshake

Hi, I'm getting the alert "Remote host connection closed during handshake" while intercepting the Android and IOS applications. I have tried with different certificates and different SSL options but still the error....

Whatsapp and twitter MITM

Dears, Can anyone please assist why cant i intercept Whatsapp or twitter packets from mobile device even after installing the burp certificate and unpinned the app.

Intercepting data on Android Device

Hello, I am still struggling to troubleshoot the issue I was facing earlier. I am trying to use Burp Suite to see my network traffic on my mobile device however when I connect it I can see the request in the Burp Suite...

How to launch Intruder attack from command line

Hi, I would like to know if there is a way to record an Intruder attack so that it would be possible to launch it again from command line. The idea is to automatically launch fuzz testing. Through my research, I saw...

Intercepting data on Android Device

Hello, Please can someone help me with the following: I am trying to use Burp Suite to see my network traffic on my mobile device however when I connect it I can see the request in the Burp Suite however my phone...

Clarification on Webservices scanning

I have some clarifications on web service testing. Question 1: Is burp suite capable of performing testing webservices against all known vulnerabilities associated with web services ? All scanning options present under...

How do I configure BURP to ignore method OPTIONS on scope?

Hello there, How do I configure BURP to ignore method OPTIONS on scope? This is very annoying. Tks!

Connection types

Hello. In every single site my connection is closed is it ok?Can i use burp with closed connection or there is something wrong

how to generate different token or session id for every request that i made using intruder?

how to generate different token or session id for every request that i made using intruder? your support already give a suggest, i can change the token using random value using payload. But from my understanding, the...

Letsencrypt Support

Hi all, Is there a recommended way to use Letsencrypt certificates on collaborator at all? We're using it to handle all of the DNS for a dedicated domain solely for Burp so setting up another DNS server for one request to...

Burp Pro v1.7.34

Can i get trial version for win64? 2 day of trial period will be fine to check all i need. Thanks

Android traffic interception when app is accessed via VPN

hi , My Android app is accessible only when connected via VPN connection on my Android device. Please tell me how to intercept app traffic on my laptop running Burp tool Regards, Garry

Get the type of check being performed by the scanner using a BurpExtender script

Hi, When implementing a BurpExtender script, and specifically a http listener, I know i can check if the Scanner generated the http message like so: def processHttpMessage(self, toolFlag, messageIsRequest,...

Licensing and number of activations

Hi guys, while requesting for Burp trial license , i gave the 'number of users' to be one. Does that mean burp can be installed only once ? Because i was able to install in 3 locations (different systems) and the 4th time...

Need steps to Record the Jmeter REST API Request

session id

Headless scan in BURP with bearer token

No internet connection error when attempting to connect to Google Play Store.

NTLM Platform Auth Problem

Burp Collaborator Server Error Runing

Remote host connection closed during handshake

Whatsapp and twitter MITM

Intercepting data on Android Device

How to launch Intruder attack from command line

Intercepting data on Android Device

Clarification on Webservices scanning

How do I configure BURP to ignore method OPTIONS on scope?

Connection types

how to generate different token or session id for every request that i made using intruder?

Letsencrypt Support

Burp Pro v1.7.34

Android traffic interception when app is accessed via VPN

Get the type of check being performed by the scanner using a BurpExtender script

Licensing and number of activations

Burp Suite Support Center