How do I? - Page 324 - Burp Suite User Forum

burp active scan

Hi, I am testing a web page (a form) that allows you to make the changes for several fields. The form has several parameters in POST request (name and value pair in the body). If you do not make any changes, and hit submit,...

Scanner Issue activity

Hello, How can I preserve the "issue activity" contents across restores? Thank you

Severity Ratings

I understand that the severity ratings are defined based upon the experience of your security researchers and and seeing the vulnerabilities in real applications. What I have not yet been able to identify is what exactly a...

Hex encoded characters in custom parameter from macro response

I'm trying to work with a JSF application that uses a ViewState parameter as a CSRF token. I have setup a macro to grab the token and use it in requests, but character encoding is preventing this working. The response...

How do I make Burp settings persistent?

Hi, I'm running the Burp Suite Free Edition v1.6.32 on Windows 7. When starting the jar file, I'm getting a pop-up "Delete old temporary files?", which I don't delete, then I can use the app. But the settings set in...

Proxy Issue - Browser Hangs??

I set up Burp proxy as per documentation, but when I request a URL it shows in the http history tab but the page then hangs in the browser window, tried in Chrome, Firefox and IE. Can't figure our what the issue is... Any...

Test application with random parameter names

If there is any possibility in Burp to use Intruder or Scanner to test an application which sends in each request random parameter names? Application works in this way, for each page: - generates parameter names, I see...

Test application with random parameter names

If there is any possibility in Burp to use Intruder or Scanner to test an application which sends in each request random parameter names? Application works in this way, for each page: - generates parameter names, I see...

Test application with random parameter names

If there is any possibility in Burp to use Intruder or Scanner to test an application which sends in each request random parameter names? Application works in this way, for each page: - generates parameter names, I see...

Getting Scan result report

I have added scans to the burp suite professional and notice that under my scanner and scan queue tab that issues have been identified, however I am unable to view or print out a report on what these issues were. what am I...

Private Collaborator Server Refuses requests

I am trying to setup a private Collaborator server, and am running into issues with the DNS server. The server starts up fine; listening on port 80, 443, and 53. However, when I run a "netstat -plntu" on the server...

Burp Suite CA

Hi, I have regenerated my burp suite CA but i still keep getting error when intercepting request. http://prntscr.com/9hh3yw May i know how can i resolve this ? Thanks in advance! Mikko

Launch BurpSuite without checking for new version

Is it possible to launch Burpsuite such that it won't check for existence of newer version? FYI: We are considering to automate the burp scanning. Thanks, Vinay

View Previous Scans

How can I view previous scans? The "Hide finished items" is not checked, but I can not find any completed scans. Thanks, Deanna

Connection problems while using Burp

Hi, I have problems with setting connection when using Burp. I found out that when I am trying to reach the website using Burp proxy, just one SYN packet (and two retransmissions) is sent while when I don't use Burp proxy...

Proxy Listeners does not support for the specific address other than predefined proxy.

My proxy is "proxy.xxx.xxx.com". I am unable to edit under Proxy > Options > Proxy Listeners > Edit.

Proxy to support Javascript connection to cross domain connection

Hi, I configured my web app to -> 127.0.0.1:8443 to forward to all request to qa1.x.com:443. This works fine. the proxy is good. however, my web app javascript connect to a host: cdn.y.com This cause an application...

Set target to a different host and not the web browser.

I get using the web browser for testing web based testing. What I'm confused about is...with BURP can you target a different host/machine/PC/linux machine and still use the web browser as the MITM. I want to look at a...

Some problem with certificate

I use Burp to get trafic from my Android Mobile, but some applications returned the following error: (HttpNetworkException:error:14090086:ssl3_get_server_certificate:certificate verify failed) what does that mean?

Collaborator Troubleshooting

I'm trying to setup a private collaborator using HTTP first using only an IP address on port 8080 (working on getting all the approvals for dedicated domain, wildcard cert, etc.) but the health check for the "server http...

burp active scan

Scanner Issue activity

Severity Ratings

Hex encoded characters in custom parameter from macro response

How do I make Burp settings persistent?

Proxy Issue - Browser Hangs??

Test application with random parameter names

Test application with random parameter names

Test application with random parameter names

Getting Scan result report

Private Collaborator Server Refuses requests

Burp Suite CA

Launch BurpSuite without checking for new version

View Previous Scans

Connection problems while using Burp

Proxy Listeners does not support for the specific address other than predefined proxy.

Proxy to support Javascript connection to cross domain connection

Set target to a different host and not the web browser.

Some problem with certificate

Collaborator Troubleshooting

Burp Suite Support Center