How do I? - Page 4 - Burp Suite User Forum

Lab: CSRF vulnerability with no defenses

Hey all, I am working my way through your labs (which I must say are excellent) and am having trouble completing the CSRF with no defenses lab. In the exploit server, I am using the following code in the body (with...

CSRF vulnerability with no defenses -> not solved but exploit works

Hi, i'm trying to solve the lab, also the lab "CSRF where token validation depends on request method" in both labs the exploit works for me and i can change the mail. But the page with only the submit button does not...

reset labs

Can you please reset just the cross-site scripting (XSS) labs? thanks in advance

Conflicting scan configurations

If a Burp user accidentally picks two built-in scan configurations one of which excludes the other, what happens? Let's say the user adds 'Audit checks - medium active' and 'Audit checks - light active' will both medium and...

Remove false positives

Hi! I marked some issues as false positives, how can I remove them from the exclusion list? I try to get them back. Thanks!

Fix ERR_UNSAFE_PORT error on built-in browser

I'm trying to access a service listening on port 10080 and the built-in Chromium browser is returning an error: ERR_UNSAFE_PORT On "regular" Chromium I can use the explicitly-allowed-ports parameter to bypass this, but...

Getting No more activations allowed message

Hi Team, I am trying to reactivate my Burp Pro license several times on my different machines due to environmental issues. I unable to reactivate as I am getting "No more activations allowed for this license" message....

Lab: Username enumeration via different responses

Hello just updated burp to v2020.6. I'm trying to complete this lap however not sure if lab is out of date of if new version of burp is not compatible? I've got to step 8 however in the results page, all the lengh results...

[Burp Proxy with Android] No connection to proxy from other device

Hello, I've recently had this error pop up and I'm unable to fix it. I'm trying to intercept http traffic from my Android device with Burp, I have done this with the exact same setup a few days ago and it worked fine,...

getting Error

getting error while installing Burp community in kali terminal Exec format error

Burp CA certificate download

Hi, I am trying to download CA certificate from http://burp site. But this site cant be reached error is coming. How to proceed. Please help.

Fuzzing parameter names

Hello, is there a way to instruct Burp in order to include the input/parameter names in the scope of scans ? The idea is to automate this process : https://portswigger.net/blog/attacking-parameter-names And to detect...

I'm trying to run a simple CURL command to download a scan report, but getting an Error with my APi token despite it being valid

I'm trying to download a report using the CLI and after a couple of minutes it gives me this error: "curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the...

Lab: CSRF vulnerability with no defenses

CSRF vulnerability with no defenses -> not solved but exploit works

reset labs

Conflicting scan configurations

Remove false positives

Fix ERR_UNSAFE_PORT error on built-in browser

Getting No more activations allowed message

Lab: Username enumeration via different responses

[Burp Proxy with Android] No connection to proxy from other device

getting Error

Burp CA certificate download

Fuzzing parameter names

I'm trying to run a simple CURL command to download a scan report, but getting an Error with my APi token despite it being valid

Automated scanning

Testing Rest API

Automated scanning

Manual testing using Community Edition

Unencrypted upstream proxy server

JRE warning magic number

No more activations allowed for this license

Burp Suite Support Center