The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

No user lookup functionality on NoSQL lab

Darius | Last updated: Oct 20, 2023 10:13PM UTC

Hi, I'm doing the NoSQL - extract unknown fields lab. And I'm stuck. https://portswigger.net/web-security/nosql-injection/lab-nosql-injection-extract-unknown-fields The description says there's a user lookup functionality, but it doesn't appear anywhere. Only the credential lookup. I tried `GET /user/lookup?user=...` like in the previous noSQL lab, but this doesn't work. Is there something missing? Or am I overlooking something? Thank you!

Michelle, PortSwigger Agent | Last updated: Oct 23, 2023 09:18AM UTC

Hi The lookup functionality is not linked to a specific page within the app. Have you taken a look through the solution to find out how this lab can be approached?

Darius | Last updated: Oct 26, 2023 07:00PM UTC