How do I? - Page 328 - Burp Suite User Forum

Collaborator Log Messages

We are testing a private collaboration server that is exposed to the Internet. When I came back from lunch I saw this in the console: 2015-08-05 12:40:12.508 : Request received:...

No UI after launching BUrp from command line

When I try to launch Burpsuite v1.6.01 from my 32-bit Ubuntu-12.04LTS, it shows message "Proxy:Proxy service started on 127.0.0.1:8080" but no UI is displayed means Burpsuite App is not launched. -My PC has a second...

ASP.NET forms authentication login redirect

Can Burp Suite support a login redirect where the login page is not within the scope? I have a /Employee and a /Customer area within my ASP.NET MVC application. For ease of development, the login URL in Web.config is...

Burpsuite is not starting

When I try to launch Burpsuite v1.6.01 from my 32-bit Ubuntu-12.04LTS, it shows message "Proxy:Proxy service started on 127.0.0.1:8080" but no UI is displayed means Burpsuite App is not launched. -My PC has a second...

How do i replace a value that is sent in multi-part/form-data body of a request?

Dear all, I have the following Form data, that is sent through HTTP POST to a site: -----------------------------10935559812996 Content-Disposition: form-data;...

Burp Collaborator - Wildcard certificate problem

Hi all, I have an internal collaborator Server up and running on a physical server with the following config: { "serverDomain" : "collaborator.test.com" "eventCapture" : { "https": { "hostname" :...

Internal VA

Hi there, I am doing some Internal VA scan. What is the difference between External VA scan and Internal VA scan.What are the most common things to look out for. What are the most common web host used by a mid to large...

Site Map Data populations

Hi All, I have a question related to site map. As per "https://portswigger.net/burp/help/target_sitemap.html", Site Map Views can be created by "The left-hand-side tree view contains a hierarchical representation of...

Installing Burp's CA Certificate in an Headless Android Emulator

Hi, I am using an headless android emulator with API leve 19 on amazon ec2 ubuntu instance. Can you please with installing Burp's CA certificate in an headless android emulator ? Thanks, Chhagan Mathuriya

the restoreState() function gives a runtime error

I'm developing an extension that pulls back a list of saved burp states into a table. I'm trying to get the application to restore the burp state when one of these items is clicked. Unfortunatly Burp is giving me a runtime...

Increase single-thread scanner speed

Not sure if this is a bug or the standard behavior, so posting here first. I tried this with burpsuite_pro_v1.6.11.jar and burpsuite_pro_v1.6.02.jar with the default initial config. The application was hosted locally with...

Proxy (VPN) Help [URGENT]

Hello, I've got Burp Suite Professional and I've got a test Process here for my Website, that it attempts a combination of a specific E-Mail and a bunch of Passwords. However, I've put it (on my Website), so if the user...

Session handling

session < > " ' `

Session handling

The log out detection in Burp is inconsistent when "Follow redirections where necessary" (Scanner > Options) is set. Inconsistent because it tests the session validity sometimes before redirecting and sometimes after...

Session handling

The log out detection in Burp is inconsistent when "Follow redirections where necessary" (Scanner > Options) is set. Inconsistent because it tests the session validity sometimes before redirecting and sometimes after...

Handling Multi-Staged Logins for Scan with Burp

I am trying to automate the login process and validation of successful login via Burp Session Handling/Macros. This login requires an initial POST that includes the username/password, then, in the response to the initial...

intercept proxy based applications

I was trying to intercept an application (Internet Download Manager) requests after I configured it's proxy, I was able to intercept the request, however I don't receive response. could it be a certificate problem? if not,...

Determining number of requests/attacks made

I am scanning two websites for XSS attacks (or any other test) only One is ASP.net and other is PHP. Lets say I am testing only URL parameter value and in both the cases there 5 parameters each Question 1: For both...

changing responses exiting burp

A thick java application needs gzipped responses, so I'm trying to make an extension that re-gzips HTTP responses going from burp to the application. However I can't find the right callback to register. Both IHttpListener...

Query Parameter in SSL Request, where is this?

I am validating issues which were previously found. In the URL, the following information is available: GET /cleaned/servlet/ControllerServlet?commandLink=AppPriceReportList.jsp HTTP/1.1 Since the connection is via...

Collaborator Log Messages

No UI after launching BUrp from command line

ASP.NET forms authentication login redirect

Burpsuite is not starting

How do i replace a value that is sent in multi-part/form-data body of a request?

Burp Collaborator - Wildcard certificate problem

Internal VA

Site Map Data populations

Installing Burp's CA Certificate in an Headless Android Emulator

the restoreState() function gives a runtime error

Increase single-thread scanner speed

Proxy (VPN) Help [URGENT]

Session handling

Session handling

Session handling

Handling Multi-Staged Logins for Scan with Burp

intercept proxy based applications

Determining number of requests/attacks made

changing responses exiting burp

Query Parameter in SSL Request, where is this?

Burp Suite Support Center