How do I? - Page 272 - Burp Suite User Forum

jquery

Hi, how would I see what jquery version I'm running on a webpage? I'm new to this software.

Configuring a test for comparing the results from active scans from Burp Pro v1.7 vs Burp Pro v2.1

Hello, I am interested in configuring a test for comparing the results from active scans from Burp Pro v1.7 vs Burp Pro v2.1. Should I chain the burp proxies so they both capture the browsing traffic while manually...

install burp on EC2 linux

Hi guys, Can you please direct me how to install burp on ec2 linux ? thanks, Dan

Configure Burp to pass dynamic authentication token from the past response to the next request

I would like to reuse an authentication token (which is dynamic) between a response and a request in the intruder module. (By dynamic I mean that the token is invalidated after being sent to the server and that we get a...

Intercepting local traffic

I am not able to intercept the traffic generated by xampp.

Host header injection

Hi , I am trying to create POC (Proof of Concept) for header injection vulnerability on a website. https://abcd/path1/path2 Steps tried: 1. Created a server and added folders folder. 2. Added folders under server ...

Digest Auth

How do i configure Digest Authentication proxy?My Browser does not prompt even when Digest Authentication is enabled.

License

Hello, I have corporate license for Burp Suite Professional. Which product do I need to download to activate it? Trial version of Burp Suite professional? Will I be able to activate Pro license on it? Or just download...

Out of Band vulnerabilities and Collaborator

Good Afternoon, I am curious about how vulnerabilities for out-of-band issues are being presented in Burp. When looking at a finding for this, my confusion comes from the difference between the 'base request' and the...

Activation

Hello I am getting a maximum activation limit error when I am trying to activate the same on the 2nd system. How can i get additional activation?

Issue with license on 1 machine | Ernst & Young LLP [8_user_license]

Dear Team, We purchased Burp Suite professional (8 user license) and used this on 8 machines. Suddenly, on one machine we encountered "License Expired" error a few days back. From that day onwards, while launching the...

Unable to getting API hits of my xamarin iOS app in burp while browser activity is getting record

I have xamarin iOS and I have done all my configuration in burp as well as in device 1. IOS version 12.3.1 2. Burp Suit professional v2.1 3. Added proxy listeners 4. Added same proxy listeners in my iPad 5. Try with...

Dark/Alternate Java Look and Feel

Hello, Is there any way to change the look and feel to anything other than the four in options? If not, are there plans to implement the dark metal/nimbus themes? Thanks! Colin

How do I configure a test with customised 3 criteria login details

How do I configure a test with customised 3 criteria login details. Essentially to login into the application I have to enter an username, a password and my Client name. In your application I can only enter the username and...

Insertion Points [x skipped]

Sorry, but I couldn't find this explained anywhere. When the Scan queue reports "[x skipped]" under Insertion points, what does that mean? Thanks.

"No response received from remote server"

After I make a few requests to the web server, I received an error "No response received from remote server" in browser. The alerts tab also shows the same error message. I saw a solution which is to resolve by reloading CA...

How can I intercept traffic on iOS 10?

Always when I try to intercept traffic from some specific Apps on iOS 10 I get the error below. The client failed to negotiate an SSL connection to graph.facebook.com:443: Received fatal alert: unknown_ca I did some...

Invalid Directory Structures found during scans

Hi Team, With the new upgrade to v2.1 Prof Edition, i ran a crawl and audit and i see lot of invalid directory structures (Image link: http://prntscr.com/o8uto8) now in my website. Unable to find out how to disable...

Can we install Burp Suite Professional version in server

What's the difference between "Normal" and "Open-ended responses" timeout?

I see that I can configure timeout. What's does the "Normal" and "Open-ended responses" timeout mean? I have a request that took server very long time to response because it need to query a very large database. Which one...