The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Getting error in Lab: Broken brute-force protection, multiple credentials per request

Seido | Last updated: Feb 21, 2023 12:28AM UTC

Hello! I entered a json list for the password portion of this lab, but I keep getting an error code when I show the response in the browser. I do get a 302 response, but for some reason when I copy the link for show response in browser, I get this instead: Internal Server Error Unexpected "RenderableItem=" from [line 1, column 1] to [line 1, column 15] Is this because of the way I formatted my json list? I was originally using my own simple program to convert it, but I also tried converting the pw list into json format via a web application. Any help would be appreciated!

Hannah, PortSwigger Agent | Last updated: Feb 21, 2023 09:47AM UTC

Hi How have you formatted your JSON list? You will need each item in double quotes, with a comma separating each value. Whitespace should not matter in JSON. Have you checked out the community solution video that is available?

Seido | Last updated: Feb 21, 2023 09:44PM UTC

Yes, I have separated each item in double quotes with commas separating each value, and have also triple checked with the community solution video.

Hannah, PortSwigger Agent | Last updated: Feb 23, 2023 10:04AM UTC

Hi I've just checked this lab, and it is working as expected. I used this online tool to convert my password list to a JSON array: https://wtools.io/convert-list-to-json-array Please let us know if you need any further assistance.

BurpWrust | Last updated: Dec 14, 2023 10:22AM UTC

Hi, I have the same issue, even when inserting the list as an array correctly within double quotes and with commas, I get the response 302, but when I copy the link, I receive this error Unexpected 'RenderableItem=' from [line 1, column 1] to [line 1, column 15]. maybe because i use community edition?

Hannah, PortSwigger Agent | Last updated: Dec 15, 2023 10:07AM UTC