How do I? - Page 65 - Burp Suite User Forum

use 32-bit JVM

I am wondering if I am using wrong version JVM or Burp Suite. Recently our organization renewed the Burp Suite Professional v1.6.21. In account to that I see an alert message each time I launch as "You appear to be using...

Does Burp Pro is looking for all issues types out of the box ?

Dear Burp Support, In older versions of Burp Pro (version 1.7 or earliest) it was possible to choose the types of issues that Burp was able to look for; it was a menu under Scanner->Options->"Select Individual Issues"...

Lab: Web cache poisoning via ambiguous requests

Hello, I have some problems with this lab: 1)Network Protocol Error An error occurred during a connection to 0abe00600459dac382172f1d000400a5.web-security-academy.net. The page you are trying to view...

Burp Intruder cluster bomb payload set reused

Hello, I need to brute-force a parameter that is sent twice to the server and follows the pattern below: ``` param1=P1-P2-P3 param2=P1-P2-P3 ``` Where P1, P2 and P3 are three payload sets. Is it possible to...

Cant able to intercept or view requests

Hi, I have burpsuite pro v2023.5.3 and genymotion with burp certificate installed on system. I was able to do SSl pinnig but can't see app traffic. I was able to see browser tarffic and facebook traffic but not my...

about exploit sever

many lab consist of exploit server , where we can deliver malicious payload. exploit server has url, file, header and body and another option but i can't finding similarity of real word how i can use that type of real server...

OIDC pentest

how to burp communication between the relying party and the OpenID connect provider ( backend to backend). My RP is asp.net core+ angular and OP is keycloak.

Internal server error when visiting url in Chromium browser (Proxy)

Hi all, I am using the Community Edition of Burp Suite (version 2022.12.7) on Mac. I open a Chromium browser by clicking "open browser" in Proxy Each URL that I try results in a screen with the following...

Lab: Web cache poisoning via ambiguous requests

All extensions in the BS are disabled and removed When running the Lab. GET /?cb=1234 HTTP/1.1 #(or GET / HTTP/1.1 (or GET/ HTTP/2)) Host: 0a3a00b404393006819e98fe00460096.web-security-academy.net Host:...

Burpsuite EE REST API scan is not runing from CLI

This is Hira and I am a security engineer, I am facing an issue related to burp suite Enterprise REST API scan feature. I was giving services of security automation to one of my client, we were in trail phase and I was...

Auditing takes more than 10 days

Hi, I just signed up for the trial license,and tried running the imported scans for crawling and audit. But somehow the estimated time to complete the audit, indicates more than >10 days. Is there something wrong? or its...

LAB: Broken brute-force protection, multiple credentials per request

hi team, my question here is not strictly related to how to solve the lab, but rather I'm trying to understand how things are implemented under the hood. My learning approach usually involves understanding how things...

Can I configure the audit optimization and speed when start active scan from headless mode?

Hi, I am running Burp active scan in headless mode and recently noticed the scan time increase significantly. There are a few settings suggested in https://portswigger.net/burp/documentation/desktop/performance that can...

Burpsuite proffessional Activation failed by too many Activation

I am getting an error like 'Too many activations' My test machine was down,Is there anyway I can reset the license/activation key?

ANDROID 11 | VPN & APP USE CERTIFICATE UNABLE TO INSTALL

I downloaded cacert.der, Now I have cacert.der cacert.cer cacert.crt In certificate sections I have, CA - cacert.cer worked VPN & apps - UNABLE TO INSTALL so I cannot burp any app except google chrome WIFI -...

Uninstallation of Burp Suite Enterprise edition

I wanted to uninstall Burp Suite Enterprise edition but deleted the uninstall.exe file and other contents directly. Now it is not allowing me to uninstall the program without that file even though I have deleted all Burp...

xss

hello can you reset the xss laboratory rooms for me

xss

hello can you reset the xss laboratory rooms for me

Burp Proxy Forces HTTPS in the firefox private WIndow

Hi Burp Team, I recently start facing issues when proxy is enabled in firefox private browsing. In private windows the website force to make HTTPS connection and then fails giving "Failed to connect to wekor.thm:443"...

Burp Exam failing 3rd stage

Hi, I have attempted the burp exam a few times now and I continue to get stuck at the 3rd stage. The other 2 stages I go through quite quickly. But when I arrive at the file read and try to implement/combine the...

use 32-bit JVM

Does Burp Pro is looking for all issues types out of the box ?

Lab: Web cache poisoning via ambiguous requests

Burp Intruder cluster bomb payload set reused

Cant able to intercept or view requests

about exploit sever

OIDC pentest

Internal server error when visiting url in Chromium browser (Proxy)

Lab: Web cache poisoning via ambiguous requests

Burpsuite EE REST API scan is not runing from CLI

Auditing takes more than 10 days

LAB: Broken brute-force protection, multiple credentials per request

Can I configure the audit optimization and speed when start active scan from headless mode?

Burpsuite proffessional Activation failed by too many Activation

ANDROID 11 | VPN & APP USE CERTIFICATE UNABLE TO INSTALL

Uninstallation of Burp Suite Enterprise edition

xss

xss

Burp Proxy Forces HTTPS in the firefox private WIndow

Burp Exam failing 3rd stage

Burp Suite Support Center