How do I? - Page 54 - Burp Suite User Forum

Import JSON File with REST APIs

Hi Team, If i want to feed a list of REST APIs in a json file format, not URL, is it possible to do so in Burp UI and also via Burp API for automation. The objective is if a user uploads a json file with REST APIs, can...

Reset all my labs and lessons progress

Hi team, Can you please reset all my labs and lessons progress as I plan to start them again. My email id is ankursharma012@gmail.com regards Ankur

Override default collabolator settings

Hi! Due to various restrictions, I know that I will never use a public collaborator address. When turning on burp, I always have to change the address to my self-hosted - which generates a few more clicks with each test. Is...

"cors=1" in Cache Key Injection lab

Hi, I'm working on the Cache Key Injection lab. It mentions that knowledge of other vulnerabilities such as parameter pollution, header injection in the response, and of course XSS is necessary to solve it. However,...

How do I dockerize burp pro as a user (not as root)?

Hey, so the following is the case: I want to creae a burp image that has already been activated, since I need multiple containers from that image. I successfully did this by mounting the .java/.userPrefs/burp...

Need to download scanned URLs from Burp Suite EE

We need to download the URLs that we've scanned with Burp Suite EE. How do we do this? Is there an API query we can use?

Crawler API for Burp

Hi, I am using the current version of Burp Suite Professional. Currently, I am running Burp headless to scan our application, but I want to use crawler to find path without providing paths in the sitemap. I am looking...

No more activations allowed for this license

Dear burp team, Unfortunately I have had to reinstall my laptop because a firewall rules and now when I try to install burp suite, I get the error "No more activation allowed for this license". Could you help me...

Sort result / history (any tab) depends of multiple columns

Hello, I just wanted to know if it was possible to sort result with multiple columns. For context, here is my situation: I'm doing a SQL Blind injection in a lab and want to sort my result in a way that first are the...

how to send api request to burp to do repeater or intruder request once via api

Hello sorry for the bother, i have wrote extension to send api request to burp to scan url but can't figure out how to send it to repeater or intruder instead as the scan keeps the task on going and i need it to run only...

Lab: CSRF where token is tied to non-session cookie doesn't get solved

I've completed the lab, successfully changing the email address, but still, the lab doesn't solve, I can't understand why it's not being completed. Please help me!

Burp suite enterprise not responding after offline upgrade

Using offline upgrade exe downloaded from portswigger and uploaded from the admin portal, we tried to update burp suite enterprise from 2021.x to 2023.7. But after this action the services for burp suite enterprise is got...

Lab: Visible error-based SQL injection

Dear team, I am currently doing the Portswigger academy labs for SQL injection. In the lab - Visible error-based SQL injection, the below payload as per the solution works perfectly fine. PAYLOAD = ' AND 1=CAST((SELECT...

Activation Failed

hello here, I logged in with the license but it failed... for the time the subscription is still active next year (No More activations Allowed for This License)

I want to extend my exam expiry date

Hey Dear Portswigger i want to to extend my purchase exam expiry date. Please help and guide me. Thanks

Security Regression Testing

Hi team, Could you please help me with how we can use Burpsuite for this use case: Context: BurpSuite Enterprise has identified security issues on an huge web-application. Lets say it identified about 25 issues of...

Edit macro programmatically to update request

Hi, I have a target that gives me 401 after some time and tries. I have to do re auth every time, so I searched on google and I discovered a way to do it: 1. Add a rule to check session validity, looking for 401 in...

Completing the Learning Materials

I am trying to complete all the Learning Materials, but currently it is stuck at 97%. I tried finding the ones i am missing manually but was unsuccessful at that. Is there a way to see them?

Burp Extender API and Montoya API

What is the different between Burp Extender API and Montoya API? Can I use Burp Extender API from Montoyal API ?

Is sending group request in repeater "Send" options disappeared?

In burpsuite's 2023 9.1 version there was a drop down in "Send" button in repeater tab. i was using it to Sending grouped HTTP requests (for test race conditions). But, drop-down arrow by the side of the Send button...