Burp Suite User Forum
I have a problem with writting macro for JSF login page. I have done every possible things (remove cookies, javax.faces.ViewState etc.) but I havent figured it out. Any ideas for this problem? Thank you in...
<script>alert(1)</script> How burp insert this payload
Hi, Is it possible from a custom plugin to delete target, proxy, scanner and spider information per domain? e.g. delete and target, proxy, scanner or spider information for www.abc.com, but keep rest? Many thanks, ...
Hi, I'm using Burp Suite Free Edition v1.7.22 Is there any way to view the current SSL protocol in use while intercepting traffic? SSL 3 vs TLS 1.1, etc.
Hi, Is it possible within a burp extension to change a responses status code? Or if not, is it possible within a burp extension to intercept a request (not a response) and generate an entire fake response instead of...
when I run intruder in chinese website and use Grep-Extract to filter what I want,If I filter the part is included in the Chinese, then the results will appear in the column distortion,help~
Hello Support, I am trying to interact with a site through Burp PRO version 1.7.22 that is using PCKS#12 certificates. I have a valid certificate and I am able to access the site when I use the SSL-bypass. However, when I...
Burp Suite creates temporary files when it is opened. These files are deleted once the work is done. Does someone know what logging is made when en when it is deleted.
I would like to run the same set of brute-force password-dictionary attack using the same set of parameters on a list of IP addresses. Is there a way to automate that using the GUI in Burp Suite? Thank you.
Hi guys! I need to encode payload to SSHA in Intruder. But there is no SSHA in payload encoding. Here is example: test encoded to SSHA is qUqP5cyxm6YcTAhz05Hph5gvu9M=
Hello, I'm currently making a burp extension in Jython. I'm trying to import a jar file - I followed steps as outlined in http://www.jython.org/jythonbook/en/1.0/ModulesPackages.html. Using...
Hello - I am currently testing Oracle E-Business Suite that has a mix of normal HTTPS traffic with params and also HTTPS traffic that has the params java serialized. Is there way to deserialize the object to XML or some...
How do I request support (already have maintenance support) but have no idea who/how to contact anyone for support if needed.
Hi, i've installed BURP Pro + Jython + Carbonator. I'm now running java -jar -Xmx1g burpsuite_pro.jar https somedomain.com 443 c:\report.html but it doesn't product an output and it keeps prompting a dialogue box...
I have a web application that expects a header value that is a hash of the contents of the POST body and an HMAC. I'd like to extend the Repeater tab similarly to how the Content-Length is automatically updated when the body...
hi I Can Not Target Any https Web. When I Give request in Browser it show 301 Move Permanently what can i do now?
I currently have a number of extensions that I don't want anymore, but if I remove them from the extensions list, the next time I start up Burp they appear again. I've tried saving the project options / user options but the...
Hi, I have configured browser proxy with localhost:8081/However our company use proxy to go to web.Where i can configure proxy ip with port? thanks
Hi, How do I configure BurpSuite to automatically connect to my to test application using OpenID Connect/oAuth for Spidering, and active Scanning? I found already the EsPReSSO extension in the BurpAppStore but I cannot...
Hi Is there any way to automate a testing mapping data from burp responses? It is, i do request 1, logon, which returns a token. Request2 needs that token as an input field, so there is an option to map that value from...
Page 302 of 326
Your source for help and advice on all things Burp-related.