Burp Suite User Forum

Login to post

Kerberos authentication issues

adrian | Last updated: Jun 06, 2021 11:32AM UTC

Hi guys, we are experiencing issues with Kerberos authentication within Burp. We follow the documented process for adding NTLMv2 credentials but this works intermittently between different releases of Burp for Kerberos enabled applications. Any advice on how to deal with this issue?

Uthman, PortSwigger Agent | Last updated: Jun 07, 2021 09:50AM UTC

Hi Adrian, Can you clarify whether the sites/applications you are testing use NTLMv2 or Kerberos? Unfortunately, Kerberos is not natively supported in Burp so you will need to use the extension below: - https://portswigger.net/bappstore/94135ed444c84cc095c72e6520bcc583 We have a feature request in our development backlog to support SPNEGO/Kerberos authentication natively in Burp so we will update this thread when that becomes available. If you are experiencing a bug then please email support@portswigger.net with diagnostics (Help > Diagnostics), screenshots, and steps to replicate.

You need to Log in to post a reply. Or register here, for free.