Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

OAUTH labs doesnt show some paths

tang | Last updated: Aug 09, 2024 12:36PM UTC

Hi i was doing OAUTH labs this lab specifically https://portswigger.net/web-security/oauth/lab-oauth-stealing-oauth-access-tokens-via-an-open-redirect and after trying for a while i couldn't solve the lab so i looked up to the solution and realised that some endpoints doesn't show up on my burp history like /auth?client_id=[...] this request is not in my burp history but this is POST /authenticate also api needs to make a call to /me but that doesn't show up either i tried manually requesting but i still get nothing burp version is this 2024.6.5

Ben, PortSwigger Agent | Last updated: Aug 12, 2024 08:01AM UTC

Hi, Do you have any specific scope settings configured in Burp that might prevent this request from being displayed in the HTTP history? Are you able to provide us with a screenshot of exactly what you are seeing? If this is easier to do via email then please feel free to send us an email to support@portswigger.net and we can take a look from there.

tang | Last updated: Aug 12, 2024 11:44AM UTC