Burp Suite User Forum

Create new post

Found 50 posts in 42 threads

NET::ERR_CERT_VALIDITY_TOO_LONG

Linux Certificate : Android Device 7.0 (Nougat) Issue ---------------------------------------- NET

Last updated: Feb 27, 2020 10:55AM UTC | 8 Agent replies | 6 Community replies | How do I?

NET::ERR_CERT_WEAK_KEY

connection with Burp Proxy and shows the error "Your connection is insecure" with the following description: NET

Last updated: Nov 05, 2019 09:08PM UTC | 0 Agent replies | 1 Community replies | Bug Reports

.Net Framework

My Support team needs to upgrade .Net Framework and want to know if 4.8 .Net framework is supported?

Hi Kevin, Can you clarify what you are using the .NET framework for in relation to Burp?

Last updated: Oct 15, 2021 02:55PM UTC | 1 Agent replies | 0 Community replies | How do I?

net flix

i want netflix account

Last updated: Jul 25, 2019 07:00AM UTC | 0 Agent replies | 0 Community replies | How do I?

NET::ERR_CERT_AUTHORITY_INVALID Help

NET::ERR_CERT_AUTHORITY_INVALID Help

Last updated: Jul 18, 2023 07:14AM UTC | 1 Agent replies | 0 Community replies | Bug Reports

.NET plugins support

Would be great giving .net support to develop burpsuite plugins

But there are existing technologies that can let you bridge between .NET and Java code, for example:

Last updated: Sep 19, 2016 09:45AM UTC | 1 Agent replies | 0 Community replies | Feature Requests

Burp Infiltrator and .net 4

I am trying to install the infiltrator on web server that has .net 4 framework. When installing it keeps saying that it cannot install the .net 3.5. When building the infiltrator it states that .net 2.0 or later is supported.

Last updated: Jul 23, 2021 09:47AM UTC | 1 Agent replies | 0 Community replies | How do I?

Getting net::ERR_HTTP2_PROTOCOL_ERROR after doing latest update of burp

Hi, I updated the Burp to its latest update a couple of days earlier, and ever since burp's preconfigured browser is not able to load any URL in it, giving the blank screen. Initially, it was giving the error of security...

Last updated: May 06, 2022 05:45AM UTC | 1 Agent replies | 1 Community replies | Bug Reports

Burp Suite Chrome Cert Error: Error net::ERR_CERT_REVOKED

Linux Mint 19.1 Chrome Version 73.0.3683.86 Burp Suite Pro v2.0.18 Beta And I'm getting a bunch of net

Last updated: Mar 17, 2020 10:40AM UTC | 8 Agent replies | 4 Community replies | Bug Reports

Burp hangs when using http request smuggler

Intruder and there has been a bug reported for extension that causes the UI to lock when you have the .NET extension loaded: https://github.com/PortSwigger/turbo-intruder/issues/55 Are you able to remove the .NET

Removed .NET Beautifier extension and it's working now Thanks

Last updated: Sep 24, 2020 01:55PM UTC | 3 Agent replies | 3 Community replies | Bug Reports

Assistance With Private Collaborator Setup

.*********.net. .*********.net could not be resolved to an IP address. digitalocean.com ns2.digitalocean.com ns3.digitalocean.com DigitalOcean Records: A ****.net .********.net points to ns1.collaborator.*******.net A ns1.collaborator.******.net directs to 201.81.**.** (Droplet VPS) Collaborator Config File: { "serverDomain" : "collaborator.***.net"

.********.net polling location : collaborator.*******.net:9443

.****.net) are delegated to your private Collaborator server’s DNS (ns1.collaborator.****.net) You will also need to configure glue records to associate ns1.collaborator.****.net with the IP of your collaborator

Last updated: Oct 28, 2020 02:03PM UTC | 3 Agent replies | 3 Community replies | How do I?

No such file or directory error - ruby deserialization

module Gem class Requirement def marshal_dump [@requirements] end end end wa1 = Net RequestSet.allocate rs.instance_variable_set('@sets', wa1) rs.instance_variable_set('@git_set', "ls") wa2 = Net :Entry.allocate i.instance_variable_set('@read', 0) i.instance_variable_set('@header', "aaa") n = Net

wa1 = Net wa2 = Net n = Net

Last updated: Apr 19, 2022 08:47PM UTC | 6 Agent replies | 9 Community replies | How do I?

Embedded Browser

The errors that are shown in the dev tools console are: GET http://localhost:3000/main.js net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK) GET http://localhost:3000/styles.css net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK) GET http:/ /localhost:3000/vendor.js net::ERR_CONTENT_LENGTH_MISMATCH 200 (OK) When I refresh the page, some

Last updated: Mar 22, 2024 02:09PM UTC | 7 Agent replies | 11 Community replies | Bug Reports

jruby SSLSocket error

/META-INF/jruby.home/lib/ruby/1.9/net/http.rb:800:in `connect'", "org/jruby/ext/timeout/Timeout.java: /META-INF/jruby.home/lib/ruby/1.9/net/http.rb:800:in `connect'", "/Users/aaron/Downloads/jruby-complete /META-INF/jruby.home/lib/ruby/1.9/net/http.rb:756:in `do_start'", "/Users/aaron/Downloads/jruby-complete /META-INF/jruby.home/lib/ruby/1.9/net/http.rb:745:in `start'", "/Users/aaron/Downloads/jruby-complete /META-INF/jruby.home/lib/ruby/1.9/net/http.rb:1293:in `request'", "<script>:483:in `create_dradis_issue

The suggested solution of using the Burp API to make the request, as opposed to Ruby's Net::HTTP, worked

Last updated: Feb 22, 2017 06:57AM UTC | 1 Agent replies | 2 Community replies | Burp Extensions

Error in JRuby extension in newest Burp versions

JRuby version is 9.3.11.0 The error is raised when 'net/http' library is used. burp.IBurpExtender' java_import 'burp.IExtensionStateListener' java_import 'burp.IContextMenuFactory' require 'net JRUBY_VERSION uri = URI.parse("https://google.com") use_ssl = uri.scheme == 'https' http = Net ::HTTP.start(uri.host, uri.port, use_ssl: use_ssl ) request = Net::HTTP::Get.new uri response = http.request request # Net::HTTPResponse object body = response.body http.finish end

Last updated: Nov 06, 2023 10:40AM UTC | 2 Agent replies | 1 Community replies | Burp Extensions

Instrumented by Infiltrator Queries

Is there a way to specify .net version as i wrote my application in .net 4/4.5 while infiltrator tries to use .net 2.0 2. there a way to tell infiltrator to hook into selected dll as i dont want infiltrator to hook into .net

Last updated: Jan 04, 2022 05:17PM UTC | 1 Agent replies | 2 Community replies | How do I?

Exploiting Ruby deserialization using a documented gadget chain

Gem class Requirement def marshal_dump [@requirements] end end end wa1 = Net RequestSet.allocate rs.instance_variable_set('@sets', wa1) rs.instance_variable_set('@git_set', "id") wa2 = Net Entry.allocate i.instance_variable_set('@read', 0) i.instance_variable_set('@header', "aaa") n = Net

Gem class Requirement def marshal_dump [@requirements] end end end wa1 = Net rs.instance_variable_set('@sets', wa1) rs.instance_variable_set('@git_set', "rm /home/carlos/morale.txt") wa2 = Net Entry.allocate i.instance_variable_set('@read', 0) i.instance_variable_set('@header', "aaa") n = Net

Last updated: Oct 26, 2023 10:37PM UTC | 3 Agent replies | 5 Community replies | How do I?

java.net.SocketException: Connection reset

http://net-informations.com/java/net/socket.htm

Last updated: Aug 03, 2020 06:11AM UTC | 5 Agent replies | 5 Community replies | Bug Reports

Exploiting Ruby deserialization using a documented gadget chain

module Gem class Requirement def marshal_dump [@requirements] end end end wa1 = Net RequestSet.allocate rs.instance_variable_set('@sets', wa1) rs.instance_variable_set('@git_set', "ls") wa2 = Net :Entry.allocate i.instance_variable_set('@read', 0) i.instance_variable_set('@header', "aaa") n = Net

Last updated: Apr 19, 2022 05:39PM UTC | 2 Agent replies | 1 Community replies | Bug Reports

Advanced Target Scope - Load File

.*\.example\.com\/* test\.net\/path\/here\/* www\.test\.net\/* -----------

Last updated: Mar 30, 2022 09:52AM UTC | 6 Agent replies | 7 Community replies | How do I?

Static and Dynamic scan of .NET MVC web application coding in development environment

Hi, I am planning to buy two licenses of Burp Professional. Does Burp professional license includes all the modules/functionalities including static/dynamic scanning of developers actual coding. If not what should I need to...

Last updated: Aug 09, 2018 10:53AM UTC | 1 Agent replies | 0 Community replies | How do I?

Not tracking extension properly

Note that the .NET Beautifier extension requires Jython, and so the Install button will be greyed out

Last updated: Apr 15, 2015 09:06AM UTC | 1 Agent replies | 0 Community replies | Bug Reports

Support for Kerberos Auth.

I need to test a .NET app which uses Kerberos.

Last updated: Apr 06, 2017 04:46PM UTC | 2 Agent replies | 9 Community replies | Feature Requests

burp_infiltrator_java

support: - Java, Groovy, Scala, or other JVM languages (JRE versions 1.4 - 1.8) - C#, VB, or other .NET languages (.NET versions 2.0 to 4.5)

Last updated: Nov 03, 2022 02:41PM UTC | 4 Agent replies | 3 Community replies | How do I?

Viewstate parser

I have created an extension for the .NET viewState.

Last updated: Mar 10, 2021 12:17PM UTC | 2 Agent replies | 1 Community replies | Feature Requests

2.1.04 scanner stalling on pretty much every test

machine is not connected to the internet, that's not going to help much is it ;-) If I connect it to the net I'll detach the machine from the test network now and plug it into the net and do the upgrade, that might

Last updated: Feb 10, 2021 09:23AM UTC | 10 Agent replies | 16 Community replies | Bug Reports

Hide viewstate

There is an extension in the BApp Store called .NET Beautifier which performs this function.

Last updated: Apr 24, 2015 09:59AM UTC | 1 Agent replies | 0 Community replies | Feature Requests

asp .net web form application, with forms authentication, how do I pass the login credentials

trying to scan a secure page on our application , but authentication hits and login page gets loaded

Last updated: Nov 12, 2021 09:17AM UTC | 1 Agent replies | 0 Community replies | How do I?

Newest Burp Suite Pro Update Issue

EXE4J_JAVA_HOME to point to an installed 64-bit JDK or JRE or download a JRE from httpx://adoptium[.]net Also why adoptium[.]net? Wouldn't one want to go to Java or Oracle? Thanks! Best, Russ

Last updated: Sep 06, 2022 08:59AM UTC | 2 Agent replies | 3 Community replies | Bug Reports

Cannot use Collaborator in auditing

https://forum.portswigger.net/thread/is-burpcollaborator-net-down-569a80e7

Last updated: Feb 02, 2022 12:08PM UTC | 5 Agent replies | 5 Community replies | Bug Reports

IAST

feature: - Java, Groovy, Scala, or other JVM languages (JRE versions 1.4 - 1.8) - C#, VB, or other .NET languages (.NET versions 2.0 to 4.5) Let us know if you need anything further.

Last updated: Oct 01, 2021 12:19PM UTC | 2 Agent replies | 1 Community replies | How do I?

Lab: Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

The solution for this lab has an incorrect reference to a .com site instead of the .net site. 11. your-exploit-server-id.web-security-academy.com Anyone who copy/paste's this step incorrectly instead of using the correct ".net

Last updated: Mar 12, 2020 10:56AM UTC | 1 Agent replies | 0 Community replies | Bug Reports

Web Site scanning

Hello, We are trying to scan an Angular/.NET Core application with Burp.

Last updated: Mar 01, 2021 02:52PM UTC | 1 Agent replies | 0 Community replies | How do I?

Burp Infiltrator for PHP

We don't have current plans for this though, largely because the Java and .Net Infiltrators have relatively

Last updated: Mar 04, 2019 08:18AM UTC | 1 Agent replies | 0 Community replies | Feature Requests

BurpHttpMock - faulty behavior only on installed macos version

message) https://github.com/LogicalTrust/BurpHttpMock/blob/9161d59c0a226d6882d29cb11025da25af30f4d6/src/net it https://github.com/LogicalTrust/BurpHttpMock/blob/9161d59c0a226d6882d29cb11025da25af30f4d6/src/net IProxyListener" https://github.com/LogicalTrust/BurpHttpMock/blob/9161d59c0a226d6882d29cb11025da25af30f4d6/src/net

Last updated: Sep 15, 2021 09:47AM UTC | 2 Agent replies | 2 Community replies | Burp Extensions

Allowing all hosts through SSL passthrough except one?

portswigger-labs\.net$) into the 'Host or IP range' and ^443$ into the 'Port'?

Last updated: Mar 31, 2022 08:03AM UTC | 6 Agent replies | 5 Community replies | How do I?

Crawl Website completely

Hi, I have Burp Suite Professional v2022.9.6 I am trying to crawl and audit my website (using .Net

Last updated: Nov 18, 2022 12:17PM UTC | 2 Agent replies | 1 Community replies | How do I?

Network is unreachable when connected to the internet via Apple USB phone. Burp proxy works normal when using normal router

yes i am also facing same problem , i think burp requires static net (modem or fiber connection), on

Last updated: Oct 23, 2023 11:52AM UTC | 2 Agent replies | 3 Community replies | Bug Reports

Website doesnt load when proxying through burp

doesn't seem to be anything that would cause issues on that page so if you can email support@portswigger/net

Last updated: Jul 04, 2022 09:07AM UTC | 1 Agent replies | 0 Community replies | How do I?

ASP ViewState does not show up

Have you considered using .NET Beautifier as a workaround?

Last updated: Mar 31, 2021 09:48AM UTC | 4 Agent replies | 2 Community replies | Bug Reports

Burp Collaborator

(I've tried multiple threads on the net as well as portswigger's guide but nothing fit to my needs) any

Last updated: Jul 24, 2019 12:59PM UTC | 4 Agent replies | 6 Community replies | How do I?

TLSv1.3 not accepted by server preferences

I think it runs on .Net which doesn't have TLS 1.3 support yet.

Last updated: Nov 22, 2021 02:59PM UTC | 14 Agent replies | 18 Community replies | How do I?