How do I? - Page 76 - Burp Suite User Forum

HTTP/1.1 to HTTP/2 conversion in Repeater and subsequent communication error

Hi, I'm at the beginning stages of working on the new HTTP/2 Smuggling labs using Chrome browser and Burp Suite Community Edition v2020.10.2. The lab is called H2.CL request smuggling. The vulnerable web site is said not...

Intercept traffic from Android application

Hello, I have tried to add certificate in systeme but I didn't succeed because I need to root my phone and I don't want to take this risk (unless the manipulation can be reversed). Any know any other way to do it ?

My request is not in my dashboard

Hi, I've put several interception requests and the never show on my dashboard. May thanks for your kind help Anne

Move burpsuite to new server

Hi, I installed burpsuite and added some scans but now I need to move the setup to new server without loosing the configuration. How can I do that? I would need the scan urls and the db moved to new server. Thanks

Delay Intruder attack

I can't find the setting within Intruder that allows you to delay an attack by a certain number of minutes. Was that feature removed? I used to use it and liked it because if I wanted to avoid a password lockout, I could...

Error: Your connection is not secure

Hello I am getting the following error (Firefox) when attempting to visit bbc.co.uk: Your connection is not secure The owner of www.bbc.co.uk has configured their web site improperly. To protect your information...

How can i get ip adress of the person iam chatting with on Facebook

Hey i dont know if it possible or not but can i use burp suite to get ip from the person iam chatting with on Facebook I tried to get ssl pinning apk for messnger and iam able to see all request while chatting with...

refound

You guys did an auto charge on my card today and I need a refund, I don't need burp anymore, the charge was a mistake

refound

You guys did a 449???? auto-debit on mine today and I need to do a refund, I don't need it anymore

CSRF issue

When I run Burp Suite scanner on my website I get the following issue on many pages. "The request appears to be vulnerable to cross-site request forgery (CSRF) attacks against authenticated users." These pages have no...

New Burp Suite Pro subscription model

Hi there, We have received your communication about the new Burp Suite Pro subscription model and we have some doubts. Should be all users added at the same time as part of a team? Some of our colleagues works on...

How do I integrate Burp suite pro in ADO pipeline or Jenkins pipeline

Currently evaluating burp suite pro, need to check if I can schedule the scans in my project every night using ADO or Jenkins pipeline

Academy and Burp

Can i use the community (free) edition in the Web Security Academy? And if so, what kind of restrictions am I looking at?

License mechanism

Once an account's license has been activated, can the account still be deleted, thus freeing up a available space to add a new account and regenerate the license. How many times can a license be activated on different...

fuzzdb with burp

Hi Team I would like how to connect fuzzdb with burp.I thinks fuzzdb it is some wordlist .But how to use it in burp.Just copy and past or it is some extension for it.??? github.com/fuzzdb-project/fuzzdb/ I will...

problem with API scanning

Hello, I would like to scan APIs with Burp Suite. I want to scan it with Burp Suite professional first. I tried hosting my OpenAPI specs at http://127.0.0.1/api_specs.json. And I add the URLs https://(my target site) and...

Handle activation when BurpSuite is part of a pentesting VM that is constantly destroyed and rebuilt?

The new licensing method associates each license with an email. However, after every penetration test, the operator's workstation is re-imaged and re-built for the next customer. Does the license allow for easy reactivation?...

H2.CL request smuggling

LAB DON'T WORK

Intercept Request

On body I have json like following: "bookingMode":"Online","cityId":null,"iswaitlistSlot":false,"numberOfApplicants":0,"previousSequenceNumber":null,"processType":null,"slotQuotaids":[11111111111] Previously when writing...

Unique locations:

I am looking to get a list of the "Unique locations:" from the results of a Crawl. A 70% of subdomains domains in my list are just redirects to same page. I would like to filter out all the Unique sites and manually review...

HTTP/1.1 to HTTP/2 conversion in Repeater and subsequent communication error

Intercept traffic from Android application

My request is not in my dashboard

Move burpsuite to new server

Delay Intruder attack

Error: Your connection is not secure

How can i get ip adress of the person iam chatting with on Facebook

refound

refound

CSRF issue

New Burp Suite Pro subscription model

How do I integrate Burp suite pro in ADO pipeline or Jenkins pipeline

Academy and Burp

License mechanism

fuzzdb with burp

problem with API scanning

Handle activation when BurpSuite is part of a pentesting VM that is constantly destroyed and rebuilt?

H2.CL request smuggling

Intercept Request

Unique locations:

Burp Suite Support Center