How do I? - Page 78 - Burp Suite User Forum

Automated scanning

If an automated scanning is doing, do I need to interact with web pages to load Rest APIs to Burp or will Burp crawl through each and every Web API automatically?

How API is verified by Burp as there exist a vulnerability or not? On what basis the report is generated? That means how do Burp conclude that there exist a vulnerability or not? Is it by any response from the web...

Automated scanning

If I'm doing an automated scanning, will you provide all the inputs/test cases for testing different types of attacks or vulnerabilities. OR is it needed to be provided by us?

Manual testing using Community Edition

Do manual testing in Burp Community Edition help to generate a report?

Unencrypted upstream proxy server

I'm trying to configure a proxy listener that receives encrypted requests from clients and forwards these requests against an unencrypted server, then encrypting and sending the responses back. I tried setting a simple...

No more activations allowed for this license

Good day! Recently I had to reactivate my Burp Pro license several times on my different machines due to technical circumstances. Now I am getting "No more activations allowed for this license" error. Could you please...

SQLi Intruder Payloads - Determine which payload has external interaction

Given a page that is vulnerable to OOB SQLi. Let's say that I run this through intruder using the SQLi payloads. How can I tell which payload triggers the external interaction? In order to setup Intruder I choose a...

Error while lauching browser from burp suite

Hi, I am seeing error when launching browser from Burp Suite. Please find the details at below and kindly provide the fix if available. "net.portswigger.devtools.client.impl.connection.local.f: Failed to read dev tools...

Blind SQL injection with conditional errors

I'm currently using the version v2023.1.3 of Burp Suite. I've tried so many ways to complete the task 'Blind SQL injection with conditional errors' but none of them works. Does anyone know an updated method to complete this...

Lab: CORS vulnerability with basic origin reflection

why do i see this message in firefox when i click on view exploit but sending it to victim works. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 401. code: <script> ...

reset all labs

hi could you reset all my labs to unsolved state

Error resolving polling server address in private Collaborator

Hi - I'm having an error resolving the polling server address, but not the server address. They are the same thing. This is the netstat output - tcp 0 0 127.0.0.53:53 0.0.0.0:* ...

Burp Suite Pro is throwing error while installation in Kali-Linux

Hi, Today i have purchased Burp suite pro and when i am installing via command prompt then getting error like below sudo sh ./burpsuite_pro_linux_v2023_1_3.sh Unpacking JRE ... Starting Installer...

The client failed to negotiate a TLS connection to [domain]: Remote host terminated the handshake

Hello! I encountered a problem when testing a mobile application on Android. Cannot capture traffic of the mobile app, the log shows an error "The client failed to negotiate a TLS connection to [domain]: Remote host...

Lincense Key

Unable to find the licenses key on my account. Please share the details.

Lab: Forced OAuth profile linking - Internal Server Error

Hi Team, I was solving the above mentioned lab and after the step 10, when I click the "Deliver exploit to victim" it shows internal server error. I followed the steps given in the Solutions as such and also referred...

BurpSequencer

I would like to know the logic for calculating the entropy of a random number test by BurpSequencer.

Secure Connection Failed error in Firefox while accessing https site through BURP suite

Hi, I am trying to access https sites in Firefox using Burp Suite Pro. On trying to access sites like google or any other https websites I am getting below error, Secure Connection Failed An error occurred during a...

I cannot download the license key.

I purchased a 2 license, but Your Subscriptions in My Account shows 「Access for license key holder only」 and I cannot download the license key.

Am I allowed to also activate my licens on my home computer

Hi, I have a proffesional Burp Suite licens that I use in my work on my machine provided by my company. The license we have is a 4 person license, I am wondering if I could activate my license on my private computer at home...

Automated scanning

Testing Rest API

Automated scanning

Manual testing using Community Edition

Unencrypted upstream proxy server

No more activations allowed for this license

SQLi Intruder Payloads - Determine which payload has external interaction

Error while lauching browser from burp suite

Blind SQL injection with conditional errors

Lab: CORS vulnerability with basic origin reflection

reset all labs

Error resolving polling server address in private Collaborator

Burp Suite Pro is throwing error while installation in Kali-Linux

The client failed to negotiate a TLS connection to [domain]: Remote host terminated the handshake

Lincense Key

Lab: Forced OAuth profile linking - Internal Server Error

BurpSequencer

Secure Connection Failed error in Firefox while accessing https site through BURP suite

I cannot download the license key.

Am I allowed to also activate my licens on my home computer

Burp Suite Support Center