Burp Suite User Forum
How can I set Intruder's "number of retries on network failure" to unlimited? I see that currently I can only set it to 20 max before I get an error.
After scanning I am not able generate the scan report followed the following steps: To generate a report of your scanning, collapse the tree view of the application's contents. Then select the top-level domain entry for...
How does Burp usually scan or validate anti-CSRF tokens? In other words, if the web application uses a form ID that does not contain one of the keywords which identify CSRF, does Burp use other methods? If so, how does it...
Hello greetings. I am attempting to brute force a param. In order to test if the param supplied is valid the page first requires that the browser has a proprietary plug-in installed. The plugin is only supported in IE...
Hello, I have three related questions; 1)) Can Anti-CSRF tokens be present in publicly accessible forms (for unauthenticated users), or are they should only be present under authenticated user forms? 2)) If burp...
How to send CTRL , ALT or function keys keyboard Interrupt through Burp Extender python API?
When entering a website which always redirects traffic from http:// to https://, burp is not redirecting automatically from the http to https. Is there a configuration which will let Burp do so?
Hi Im wondering, is there a way to make a proxy more faster and transparent ? (more like undetected ) Because some times, an application detect the use of a proxy and don't allow me to request any data and just block...
I would like to know if it's possible to renew a burp license from the command line? (on Linux) from the command line? (on Linux)
Proxy is able to intercept all requests and from there, I'm able to manually modify the requests. However, how can set this modification to be done automatically? For example, I would like to change the value of...
How do I close dynamic intruder tabs such as 1, 2, 3 etc through Burp extender API?
Under "Proxy >> Options Proxy Listeners", I see that there are three options under Certificate. 1. Use a self-signed certificate 2. Generate CA-signed per-host certificates 3. Generate a CA-signed certificate with a...
How to import python libraries installed from third party sources like requests module in burp extender API.It is not recognizing entire the path "C:\Python27\Lib\site-packages" set in environmental variables
I want to send each request from Intruder attack result box to repeater through API? And, How to get all requests in HTTP proxy tab without using def menu_item clicked method() ?
Hi When I try to use browse the HTTS websites via Burp proxy using Chrome(v45.x) and Android apps (v5.11), I got the following problem: "Server has a weak ephemeral Diffie-Hellman public...
When doing an active scan, there is an option to remove items with no parameters. What are these URL parameters? Should we scan them or not necessarily?
When doing an active scan, there is the option to remove items with no parameters. What are these URL parameters? Should we scan them or not necessarily?
Hi all, I have some weird issues with Burp for the last two days. It first started that some of my Extensions stopped reporting to Issues tab. I shut down Burp, restared it again and all suddent these problems...
I see that in Pro version feature (I don't have a Pro version), it can filter Intruder results by regex. Is this regex matched against the HTTP body or head or both? Is this regex matched against the HTTP response or...
Hi, Is there any difference between "Options >> Automatic Backup" and "Options >> Scheduled Tasks >> save state"? Are they saving the same identical thing? Are they just two ways of doing the same thing?
Page 316 of 326
Your source for help and advice on all things Burp-related.