Search Forum – PortSwigger

Would you please change our company and contact information?

been migrated/merged to the following company since the beginning of 2021: “E.ON Digital Technology GmbH … Thanks and best regards Christian Englert Vendor Management Licenses E.ON Digital Technology GmbH

Transfer User Licenses

Dear Support team, we bought 2 licenses of Burp Suite Professional with the help of CCP Software GmbH

No more activations allowed for this license

activations allowed for this license" Product Burp Suite Professional licensed to Spiele Plasat GmbH

Critical Service Issue : External Service Interaction(DNS)

When we run Burp Scan to Our Xactly product, we are seeing a Critical issue related to "External Service

External service interaction (DNS)

I have scanned a target address and found "External service interaction (DNS)" vulnerability.

Macro+soap service

Hello, I have to test a soap service. Specifically a function that deletes a token.

external service interaction DNS

I scanned my system again in March, and got new issues "external service interaction DNS" in the report

EXTERNAL SERVICE INTERACTION (DNS)

relevant application functionality, and determine whether the ability to trigger arbitrary external service … If the ability to trigger arbitrary external service interactions is not intended behavior, then you

Incorrect path reported in target sitemap

are probably problematic too), for example '<link rel="stylesheet" href="あ/style.css" />': # mkdir www … meta charset="utf-8"><link rel="stylesheet" href="あ/style.css" /></head><body>test</body></html>' > www … /www:/usr/share/nginx/html:ro -p 5000:80 -d nginx 2) browse through Burp to the created webpage (http … amd64 os.name Linux os.version 6.8.0-41

External service interaction (DNS & HTTP)

External service interaction (DNS & HTTP) Example of a Request & response: Request Response

External Service Interaction False Positive

While running active scan against a site while on a VPN, Burp reported an issue for External Service … However, the service being interacted with is coming from my Public IP on the VPN and not from the site

Another service instead of Collaborator

Hello, The firewall is blocking the domain(oastify.com) where the burp collaborator is. There are open source apps that do the same thing => https://app.interactsh.com But the collaborator gives as...

external service interaction -- https

I noticed Burp supports external service interaction -- DNS, http and SMPT. … Do you have any plan to support external service interaction -- https? … Recently we found our application is vulnerable (and exploitable) to external service interaction --

Exploiting PHP deserialization with a pre-built gadget chain - getting error

Symfony Version: 4.3.6 PHP Fatal error: Uncaught Exception: Signature does not match session in /var/www … /index.php:7 Stack trace: #0 {main} thrown in /var/www/index.php on line 7 Thanks

HTTP Request Smuggling

responses" is given as "POST /search HTTP/1.1 Host: vulnerable-website.com Content-Type: application/x-www-form-urlencoded … Transfer-Encoding: chunked 7c GET /404 HTTP/1.1 Host: vulnerable-website.com Content-Type: application/x-www-form-urlencoded … server was given as "GET /404 HTTP/1.1 Host: vulnerable-website.com Content-Type: application/x-www-form-urlencoded … should be like this: "GET /404 HTTP/1.1 Host: vulnerable-website.com Content-Type: application/x-www-form-urlencoded … Content-Length: 146 x=POST /search HTTP/1.1 Host: vulnerable-website.com Content-Type: application/x-www-form-urlencoded

Lab Login Not Working

HTTP/1.1 Host: ac201f5c1e42e752809e2e6200c0001f.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-Length: 272 Transfer-Encoding: chunked 0 POST /post/comment HTTP/1.1 Content-Type: application/x-www-form-urlencoded … HTTP/1.1 Host: ac201f5c1e42e752809e2e6200c0001f.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-Length: 272 Transfer-Encoding: chunked 0 POST /post/comment HTTP/1.1 Content-Type: application/x-www-form-urlencoded

HTTP request smuggling, obfuscating the TE header

POST / HTTP/1.1 Host: my host.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Transfer-Encoding: chunked Transfer-encoding: cow 5c GPOST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded

HTTP request smuggling, basic TE.CL vulnerability

i sent: POST / HTTP/1.1 Host: your-lab-id.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-length: 4 Transfer-Encoding: chunked 5c GPOST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded

Lab: Modifying serialized data types - Debug dumps tokens

p9a5ei0x99qi74vejsq36czp0tn1z3d6, xlbjcoe8ecul6sfmtdrt5cm8qqr6o7hx]) Invalid access token for user carlos in /var/www … /index.php:7 Stack trace: #0 {main} thrown in /var/www/index.php on line 7

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

HTTP/1.1 Host: ac451f7f1e1dd31780a427f50095008e.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Transfer-Encoding: chunked 71 POST /admin HTTP/1.1 Host: localhost Content-Type: application/x-www-form-urlencoded

Not possible to disable "Update Content-Length"

HTTP/1.1 Host: 0a9900df035bbae8c07d5a7d0077009b.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-Length: 4 Transfer-Encoding: chunked 5e POST /404 HTTP/1.1 Content-Type: application/x-www-form-urlencoded … HTTP/1.1 Host: 0a9900df035bbae8c07d5a7d0077009b.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-Length: 105 Transfer-Encoding: chunked 5e POST /404 HTTP/1.1 Content-Type: application/x-www-form-urlencoded

Is external service interaction vulnerability exploitable.

Hello, In most of the scan, burp reports, External Service Interaction vulnerability either in HTTP/

HTTP Request Smuggling

portwigger: POST / HTTP/1.1 Host: your-lab-id.web-security-academy.net Content-Type: application/x-www-form-urlencoded … Content-length: 4 Transfer-Encoding: chunked 5c GPOST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded

PHP deserialization: Signature does not match

receiving this error: PHP Fatal error: Uncaught Exception: Signature does not match session in /var/www … /index.php:7 Stack trace: #0 {main} thrown in /var/www/index.php on line 7 My secret key: f99oqo0667s8noe1clqktoa99mnzvuq2

External Service Interaction - Bug Bounty?

I have found an external service interaction issue on a website that is listed in hacker one, I want … I have recently reported an external service interaction bug, but the company asked for a poc and I had

ca certificate

The URL is http://burp/ - there's no www.

LAB: Exploiting HTTP request smuggling to reveal front-end request rewriting

HTTP/1.1 Host: ac201fbc1fd627ddc0effe2300f200de.web-security-academy.net Content-Type: application/x-www-form-urlencoded … username=carlos HTTP/1.1 X-ayZFvQ-Ip: 127.0.0.1 Content-Type: application/x-www-form-urlencoded Content-Length

vulnerable yes or no

POST /dz588q90/xhr/api/v2/collector/beacon HTTP/1.1 Host: www.---------.com Origin: http://example.com … : */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded … Content-Length: 1410 Origin: https://www.--------.com Connection: close Referer: https://www.realself.com

Would you please change our company and contact information?

Transfer User Licenses

No more activations allowed for this license

Critical Service Issue : External Service Interaction(DNS)

External service interaction (DNS)

Macro+soap service

external service interaction DNS

EXTERNAL SERVICE INTERACTION (DNS)

Incorrect path reported in target sitemap

External service interaction (DNS & HTTP)

External Service Interaction False Positive

Another service instead of Collaborator

external service interaction -- https

Exploiting PHP deserialization with a pre-built gadget chain - getting error

HTTP Request Smuggling

Lab Login Not Working

HTTP request smuggling, obfuscating the TE header

HTTP request smuggling, basic TE.CL vulnerability

Lab: Modifying serialized data types - Debug dumps tokens

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

Not possible to disable "Update Content-Length"

Is external service interaction vulnerability exploitable.

HTTP Request Smuggling

PHP deserialization: Signature does not match

External Service Interaction - Bug Bounty?

ca certificate

LAB: Exploiting HTTP request smuggling to reveal front-end request rewriting

vulnerable yes or no

Install Burpsuite on Kali ARM RaspberryPi 4

Lab 1 Directory traversal(File path traversal, simple case)

Lab: Modifying serialized data types

Lab: HTTP request smuggling, basic TE.CL vulnerability

Bug in Lab

External service interaction (DNS) false positives

Reproducing External Service Interaction (DNS) issue

Embedded browser - 503 Service Temporarily Unavailable