How do I? - Page 87 - Burp Suite User Forum

Reset a lab.

Hey, I would like to reset this lab: Lab: Inconsistent security controls I registered as a user nut forgot the username. Thank you.

Burp Pro doesn't crawl and test everything?

Target: DVWA v1.10 'Development' version (via docker) One thing that I like about Burp Pro is the capability to scan compared to the Community version. Interestingly, I find that Burp Pro doesn't crawl and scan...

Burp Professional Installation

I am unable to install Burp Professional in my M1-KaliLinux, I am able to use the JAR version although this is not something wanted for the company. Please provide a solution: Running: Picked up _JAVA_OPTIONS:...

Burp's Browser wont start

Here is the error when I do the health check for the browser: Aborting checks due to errors. Unable to start browser: DevTools listening on ws://127.0.0.1:46205/devtools/browser/4c3379a5-93db-47d6-9514-b20f10023597...

Step 3: Complete five mystery lab challenges

I read the description for few times and had difficulties understanding how to complete mystery labs. Currently I am 3 of 5 on the preparation steps by doing first few category of practitioner. I think there could be...

ERROR installing Burp Suite Community 2022 in Kali Linux 2022

Hi, I have no idea what I'm doing wrong here to install Burp 2022 on kali. Here are my configs: # uname -a Linux kali-linux 5.16.0-kali1-arm64 #1 SMP Debian 5.16.7-2kali1 (2022-02-10) aarch64 GNU/Linux #...

Playing youtube video in burb browser has no audio

I checked my audio in Crome while playing youtube and works ok. But in Burb browser the same video will play but no audio??? It would be nice to listen to lab solution videos in the burp browser. Any help thank you.

Failed to load certificate: keystore password was incorrect

I have clientcert.pem and key.pem. I can use this files to call the endpoint with the curl command. I created pem to .p12 file with below openssl command. >openssl pkcs12 -export -out Cert.p12 -in cert.pem -inkey key.pem...

Error-Based SQL injection in PostgreSQL

Hi all, In advance, sorry for the long post. I want to be as clear as possible. I've been going quite crazy figuring out how to exploit error-based blind sql-injection for the practice exam (hope this isn't too big of...

Reset progess

Can you reset all my labs and progess

Automatic Burp-Enterprise installation accept warnings

Hi all, For an automatic Burp-Enterprise installation I used a varfile. Since my server does not meet the hardware requirements, I get a warning and the setup aborts: "sudo ./burpsuite_enterprise_linux_v2022_11.sh -q...

Scan in Burp-Enterprise with a API-Key for authorisation

Hello all, Is it possible to start a Burp Enterprise scan that uses an API key for authorisation ? Thanks for the help

API PENTEST

The places that need to be changed every time are the places I have specified as "variable". While I am doing the rest api pentest, I manually enter the available variables from excel each time and test them on the...

build and run docker container enterprise edition

I am trying to run enterprise edition in docker container following this documentation https://burpsuite.guide/blog/activate-burpsuite-inside-docker-container/ Documentation that points to building burp suite...

Exploiting HTTP request smuggling to capture other users' requests

Hi, I am doing the portswigger lab exercises,one of the lab is unable to solve. i follow all the steps as given in the solution. i can reach all the steps but the lab is not solved.If anybody aware of this lab, please...

Resource Pools

Is there anyway to throttle Content Discovery?

The Burp challenge - Challenge 1

I completed all 22 labs. However, my learning progress indicated 22 of 23. What am I missing?

Dastardly failing scan against https://ginandjuice.shop

When I run a dastardly scan against https://ginandjuice.shop dastardly fails the build, as there are issues with severity higher than Info, and doesnt give me any output file. Can I get dastardly to not fail the build, and...

Mobile Pentest Related Extensions

Hi there, What are some of the mobile related extensions that I can use to do pentest. As far as I know: https://portswigger.net/bappstore/12e84399d46a408dbe970f181391f781 NoPE Proxy to bypass SSL related traffic for...

Burp Suite Pro - Support of selenium IDE

I want to know if I can configure burp suite pro proxy with selenium IDE. I have gone thru below link https://portswigger.net/support/using-burp-with-selenium. It mentioned that page content may be out of...