The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Hitting ERR_BLOCKED_BY_ORB when trying to intercept my local server

Bryan | Last updated: Sep 13, 2024 01:52AM UTC

I'm currently using Burp Suite Community Edition, and im Hitting ERR_BLOCKED_BY_ORB on some of my .js request when trying to load my application then the page just become blank. I would greatly appreciate any help or advice from anyone who has encountered this error before and knows how to solve it. Not sure it helps, but my application server is running on http://localhost:4200/, when i try to run the url on burp suite browser it also says failed to connect but i able to run the application on my local own browser.

Michelle, PortSwigger Agent | Last updated: Sep 13, 2024 07:59AM UTC

Hi Are you able to send the same requests to the application using Burp Repeater? If you clear the settings and history for Burp's browser by going to Settings > Tools > Burp's browser > Browser data > Clear all browser data from the browser data folder), are you able to browse to the application using Burp's browser?

Bryan | Last updated: Sep 18, 2024 04:47AM UTC

After i clear the browser data still same hitting ERR_BLOCKED_BY_ORB error

Ben, PortSwigger Agent | Last updated: Sep 18, 2024 09:11AM UTC

Hi, Were you able to try sending this request via the Repeater? If so, can you confirm whether or not this worked?

Bryan | Last updated: Sep 18, 2024 01:32PM UTC

When i try sending the same request via Repeater getting error message "Failed to connect to localhost"

Bryan | Last updated: Sep 18, 2024 01:34PM UTC

My settings in repeater as below -: Host : localhost Port : 4200 Without ticking "Use HTTPS" Request : GET /main.js HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cache-Control: no-cache Connection: keep-alive Host: localhost:4200 Pragma: no-cache Referer: http://localhost/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Edg/128.0.0.0 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Microsoft Edge";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows"

Michelle, PortSwigger Agent | Last updated: Sep 23, 2024 09:03AM UTC