Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

Lab: Bypassing rate limits via race conditions - Broken time limit

whiteTea | Last updated: Oct 02, 2024 08:45AM UTC

This labs seems to be broken. Normally it should have a time limit of 15 minutes. Yesterday I started the lab, but it started the lab with 00:00 time. This morning I tried again, same 00:00 time. I also don't see the option to reset the lab. Best regards whitetea

Michelle, PortSwigger Agent | Last updated: Oct 02, 2024 10:54AM UTC

Hi I've just tried launching the lab a few times this morning and the timer has reset successfully. What behavior are you seeing now? How many times did you launch the lab and over what time period did you launch them?

whiteTea | Last updated: Oct 04, 2024 08:28AM UTC

Hello Michelle, i tried the lab on 3 different days (including today in the morning). Always the same behavior. After starting the Lab, the time counter in the top shows 00:00 in red font color. I tried to solve the lab (with portswigger solution) to test, if the lab can be solved anyway. But all password tries resolving in statuscode 200 with response "Invalid username or password.". No 302 redirection =/ Also there is no Reset-Lab possibility.

Michelle, PortSwigger Agent | Last updated: Oct 04, 2024 12:03PM UTC

Hi I'm not seeing the same behavior when I test the lab. Which browser are you using? Has the lab URL changed when you have tried to launch it today?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.