How do I? - Page 99 - Burp Suite User Forum

Lab: Clickjacking with a frame buster script

I can't understand why my solutions doesn't work. I have the frame buster script in there exactly as it should be as far as I can tell. And the button is right on top of the Change email account button... I tried it both...

RUN BURP against a file with a list of pages to scan

Is there a way to run a BURP scan against a text file that contains a list of URL's to scan? I do not want it to crawl. Only look at the pages listed in the...

Upstream proxy server is not capturing any traffic coming from Terminal

Hello Burp, I am stuck with configuring the upstream proxy server to intercept traffic coming from terminal. I followed the steps as mentioned in https://portswigger.net/support/burp-suite-upstream-proxy-servers but no...

Clarification on Cookies with XSS

I'm working on the lab: Lab: Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped...

Burp--VPN

hi Team Mu issue is about how to use Burp and not to be BAN form WAF and website. In bugbounty website allow you test but sometime WAF Ban you IP .I have static IP and for example for passive scan next day website Ban...

Licence renewal

Hi, I would like to renew the 12 licences for Nets Branch Norway Haavard Martinsensvei 54, Oslo (order number 8D361F41EB and 9F116FD676). Could you please send me the offer? What is the procedure? Thank you, Irena...

How to use a parameter in a macro derived from Intruder

I frequently fuzz a parameter in intruder with a big list, and then immediately wish to reuse this value again in a macro request. Say I was creating a post in intruder with 'post_title=%FUZZ%', then I might wish to...

Timeout in communication with remote server

Hello, I'm trying to run an active burp scan with Postman. I'm running a set of REST API end points to test them via burp for any web security vulnerabilities. Weirdly enough, some of the GET requests are working...

Burpsuite License Help

I have been using my personal burpsuite account on several virtual machines and my personal computers and I see that I have maxed out my software/usage, but I don't know how to reset my license to delete it from all those...

Can you reset the progress for my labs and learning resources?

The Web App I am testing has a drop down menu, how do I intercept this drop down menu behavior to poison it maybe?

I am testing a web app that offers a drop down menu that varies in its offerings based on if you are logged in as an admin or as a user. The admin menu is longer. I want to use comparer or something to goof around with...

How to intercept C language programs' HTTP requests?

Hello, I am developing a C language program and I would like to know if Burp can intercept its HTTP requests? I searched on Google and didn't find an answer. Please help. Thank you.

In my account I dont see any keys under licenses

I just downloaded and installed Burp for trial. But I was prompted for license key when launching Burp. Am I supposed to need a license key for trial? If so, how do I get one?

Lab: User ID controlled by request parameter with data leakage in redirect

When I log in my GET request does not have a username field like the community solution shows... I log in and then turn on the interceptor and refresh the page, the community solutions shows a GET request with the...

Burp Collaborator - OAST

Hi, How do I enable the use of the external Burp Collaborator for our Enterprise solution, or is it already enabled by default? Thanks Chris

Bruce force ID param

Hi Team I would like ask about Bruce force ID param from user 7A20bc80aBdfa6988dQf19AAxXE. I try used into intruder Bruce force but there is low and big letter and digit. Scanner just doing this way.How to mix this ID...

How to intercept golang http requests?

Is it possible to set Burp to work with uppercase HTTP_PROXY instead of http_proxy lowercase?

Hello Burp :) I am wondering if it possible to set Burp to work with uppercase HTTP_PROXY instead of http_proxy lowercase? example: export HTTP_PROXY=http://proxy:port instead of export http_proxy=http://proxy:port

How lookup for specific list of parameter in search functionality in burpsuit.

Hi Team, I did find is this feature available or not? If suppose, I have list of parameters if I want to use that list in order to look for parameter or existence in burp history. is that possible? I will just load...

Reinstalled Burp, Not Enough Disk Space

Hello! Today I opened BurpSuite and I had this problem: Error occurred : Burp could not create file /tmp/burp I couldnt find a solution, so i tried reinstalling burpsuite But now i cant install it, as soon I execute...