How do I? - Page 4 - Burp Suite User Forum

license transfer?

I have two user licenses for Burp Suite Pro registered to me. I have changed positions at my work, and need to make sure my old team can continue using the licenses without any EULA violations. Is there any means of...

Exploit Server

Hi! What is exploit server where portswigger in real senario? For example what can ı use for "redirect_uri"? (I use linux)

Need Help related to lab "Forced OAuth profile linking"

Hi... i have been doing subject lab. i have been unable to grab the theme of CSRF in this lab. as we got a authorization-code and after carrying the same request how do i got the admin logged in with social media...

license transfer?

I have two user licenses for Burp Suite Pro registered to me. I have changed positions at my work, and need to make sure my old team can continue using the licenses without any EULA violations. Is there any means of...

exclude static resources

Hello! How can I to construct a regex correctly to exclude files in Advantage Scope in "live audit scan"? For example, how can I to exclude static resources. I...

burp intruder multiple request

hello Is there a way to serialize requests in an intruder Example I want to send an A request with a variable load After that, send a request B with a fixed load Is there a way to send requests like this?

Lab: Broken brute-force protection, multiple credentials per request CSRF Token issue

When trying to do this lab whenever I send any credentials I get the following error. "Invalid CSRF token (session does not contain a CSRF token)" Even when I just send one credential as a test to see the format. Is...

Requests showing -1 status and response length

Requests not returning any response after executing. When i installed logger++ , it shows me Requests showing -1 status and response length.

Burp Professional Commands ?

Hello Burp crew i do plan to get the professional edition of this product and my question is to you. I am currently working in Parrot OS to do all my ethical hacking and so on. So once i purchase the professional what are...

Burp and proxychains

So I have some problem with proxychains and burp. The burp open but the proxychains doesnt seen to work. Im using proxychains4 on mac os 2020 (t2chip) mac is running on unix. Thank you

Licence Burp Suite Pro with a license key

I was given a text file from my work with my burp suite pro key. How do i successfully licences it and download burp pro?

Combining to different accounts

On behalf of Barikat company, we need to combine two accounts belong to efraim.kati@barikat.com.tr and mesut.kucuk@barikat.com.tr under mesut.kucuk@barikat.com.tr. I have the details of both accounts. Best regards Mesut...

the web application hacker's handbook answer key

What happened to the answer key for the web application hacker's handbook? The book says to go to mdsec.net/wahh, but it just redirects to this site now.

Lab: Blind SQL injection with conditional responses

Tried all the solution in mind, in the end even given solution is not working please look. union select 'a' from users where username='administrator' AND length(password)<1 is also returning true which should be...

Exploit Server

good day. how can I set up a test exploit server or if there is any option online that can be used to test the http atacks part. Cheers...

Lab - Authentication bypass via encryption oracle

Hi, the labs instruction is to select the first byte of a decoded cookie. Then to secondary click (the selected byte) and select the "Delete Bytes" option. The issue is I follow the instruction but the option of "Delete...

Burp Collaborator alternative

Question to Blind SQL Injection labs using OAST techniques: is it possible to utilize alternative tools to Burp Collaborator (e.g. canarytokens.com or requestbin.net)? Even if I tried exact solution string and my custom...

bugs

how to identify bugs in burp suit

Burp Suite not intercepting DVWA traffic

Hi, I've been trying to use Burp Suite to intercept traffic from the DVWA site but for some reason, it does not pick up anything from the DVWA site. I have configured all the settings accordingly but it doesn't intercept any...

activate burpsuite pro on virtual machine

Hi folks, is it possible to activate a second instance of my professional burpsuite license? since I need to install burpsuite pro on a virtual machine, on the same host where I have my current license.

license transfer?

Exploit Server

Need Help related to lab "Forced OAuth profile linking"

license transfer?

exclude static resources

burp intruder multiple request

Lab: Broken brute-force protection, multiple credentials per request CSRF Token issue

Requests showing -1 status and response length

Burp Professional Commands ?

Burp and proxychains

Licence Burp Suite Pro with a license key

Combining to different accounts

the web application hacker's handbook answer key

Lab: Blind SQL injection with conditional responses

Exploit Server

Lab - Authentication bypass via encryption oracle

Burp Collaborator alternative

bugs

Burp Suite not intercepting DVWA traffic

activate burpsuite pro on virtual machine

Burp Suite Support Center