Burp Suite User Forum
"><img src=x onerror=prompt(1)>
Why is it so that every time I open a new Burp session I get a pop screen stating that a new update is available. This happens even after updating it a few moments earlier. I'm trying to automate the scanning process and...
hey, if my target for scanning is https://xx.com, how would i create a rule or a policy to scan every sub-domain under the domain??
Ignore this
Hi all, im trying to use burp suite with DVWA in order to make some experiments. Burp Suite is configured as written in the guide available in the website. 127.0.0.1 and 8080 as a port. My localhost as well works fine. Proxy...
Hi Trying to test payload coming into one of our server (GET /producer/research_display.php?ID=-null+UNiON+ALL+SELECT+null,null,null,0x4f70656e5641532d53514c2d496e6a656374696f6e2d54657374,n HTTP/1.1) and receiving...
Hi, Usually, when I'm going through some wizard, e.g. "Create new XXX", all that is required is to create new item XXX is to do a simple POST with all data included. I can then send this POST into the Burp and run active...
Hello, I am suddenly unable to find Burp Collaborator on dropdown menu. I am already familiar with using Burp Collab, but ever since my license recently expired and I updated Burp, I am unable to find a way to launch the...
I have added scans to the burp suite professional and notice that under my scanner and scan queue tab that issues have been identified, however I am unable to view or print out a report on what the vulnerability were....
Domains can be in one of three states: in scope, out of scope, or undecided. A domain is undecided if it is not mentioned by any of the in/out of scope rules. In the site map, I would like Burp Suite to hide domains that I...
I'm having trouble with getting results from a website I am connecting to over a VPN. I can get results in the Burp Proxy without the VPN going to Google or some other public site. When the VPN is on in get no results...
Hello, My company has purchased a 6-user license file to be used by its empoloyees. What can we do in the event of an employee quitting or being fired, so that that employee will not be able to use that license? Is...
I have been prompted with the below java error on doing the Security testing with help of burp suite scanner to test for vulnerabilities . I would like to inform that response code of response is 400, 404 etc and session is...
not sure what is going wrong with this. I have all settings correct. In burp i have the interface set to 127.0.0.1 and port set as 8080 (I have tried other ports as well). In firefox I Have the proxy set to...
Using the intruder functionality, i saw the application was vulnerable to a XSS (with a custom payload). Active/Passive Scan doesn't find it. So I have a hit but how can i flag this payload/result with this params as a...
Hello, Am testing an e-commerce application on my Xiaomi android mobile running on 4.4.4. I'm able to see the requests and responses but before I edit and change them, they reach their destination. i.e when i try to edit...
Hi - We recently spidered a Salesforce application and this resulted to changes in the application such as: Deleted custom field Changed the UI Skin Changed Enable Drag-and-Drop Editing on Calendar Views from on...
I purchased Burp Suite on May 10 for $349. It has been 5 days and I have still not received my License. Burp Suite is terrible and no one every responds to emails.
I was trying to load a .CER file into the Client SSL section for the proxy server, however it says it requires a password. Is there any way around this? I tried the Openssl method of setting a custom password except there...
We are working on a project, where we wanted to deploy Burp on a container in a ci/cd. Is there a way to automate the Burp License Activation process programmatically eitherway in a headless mode ? Has anyone given it...
Page 289 of 326
Your source for help and advice on all things Burp-related.