How do I? - Page 88 - Burp Suite User Forum

Burp Suite Enterprise - Hardware Requirements

What are the hardware requirements for the host machine of the Burp Suite Enterprise?

InsecureRequestWarning error when using proxy with python requests

I have a basic python request script that I want to view through a proxy first so I can review all the requests I make easily. I opened up burpsuite pre-installed version on Kali and have this code, ``` proxies =...

Burp Suite Pro - API

Hi, Is it possible to make use of API to perform some tasks with the Burp Suite Pro? Let's say that I want to send information from my software to the Burp Suite Pro to execute a specific task (like website scanning)...

use the burp suit to modification X-Forwarded-For

request modification XFF is ..... response 408 request timeout but my network is good. I don't know why.

Burpsuite Exam

Hi there, I would like to have some background about the Burpsuite certification. As far as I know 2-3 hours practices will be sufficient for the next 1.5 months. There will be two websites, 3 stages each ,if stuck on...

scan same site but result is difference

HI,I have problem. I use same setting and same web site,but when I scan the web site. The result is difference example: first time have 1 vulnerable and 5 path found the vulnerable sec time have 1 vulnerable...

Macro issues

Hi Team, I am trying to create session handling rules, wherein I am using "Check Session is Valid". In the macro, there are total 5 requests. While using that rule using repeater & session tracer, I can see that only...

License key not received for pro trial

hi, I Haven't received license key for Pro trial version that I have installed after registration. please send it Thanks

Need Help !!! How do we do IP Rotation in AWS by random hide AWS Nat IP for every TCP COnnection

Need Help !!! How do we do IP Rotation in AWS by randomly changing AWS Nat IP for every TCP Connection on what we made on each TCP request which connecting third party hosts from AWS EC2 Creation.

Restart a Crawl and Audit

It takes serval days to Crawl and Audit my site. When it gets to a page that is a log out page the Audit just stops with an "Auditing. Estimating Time Remaining' message. How do I get burp to re-initiate the login...

facing challenge with burp suite professional in ubuntu

I am unable to open Burpsuite pro in ubuntu 20.04.1 though its running in background.

Web App without the URL

So, I'm trying to test a web app that is run off of an installer via IIs. Is this possible to test with Burp Suite Pro? There isn't a URL

No web page connectivity while Intercept is running

I sent this under How do I? because Im new to burpsuite so I doubt this is a functionality issue. I am using Parrot OS 5.1 on Virtualbox on a windows 11 machine if that part matters. I cant seem to get internet...

Burp Collaborator

Hello I am considering standing up a burp collaborator on a private domain. This will be publicly accessible via the Internet. Can you confirm if there is a way to have only my licensed users connect to this instance, or...

How do i import a Swagger URL which contains a list of APIs directly into Burp ?

To perform API Penetration Testing, one needs to directly send a request from a repeater or if the number of APIs are large, one can import the API urls in Postman and then proxy it to Burp and then pen test it. Is there a...

JuiceShop and Gin & Juice Shop. Automatic full scan with my creds login enabled?

How can setup Burp with my login user/pass and run automatic scans with that creds? Whatever I try, Burp only scan "outside", not "inside" OWASP JuiceShop or Gin & Juice Shop?

GraphQL XML ScanReport?

I am trialing Enterprise Edition, and looking at https://portswigger.net/burp/documentation/desktop/scanning/reporting-results it seems that Burp has the option to report scan results in both XML and HTML formats. But...

I just can't start my exam:(

Hi there, I just wanna start my exam right now. When I click "Start the exam" button - I am being redirected to the https://portswigger.net/web-security/certification/prevalidateexam/*random symbols* and there are no any...

explanation of logic re Lab: Exploiting HTTP request smuggling to capture other users' requests

Hi, I have two questions re "Lab: Exploiting HTTP request smuggling to capture other users' requests": 1. Why does the simulated user's HTTP GET request get appended to the comment field, what's the logic behind...

More activations needed

I have a valid license, but no more activations. Can someone please reset my license counter?