Burp Suite User Forum

Login to post

Unable to download burp extensions

Rahul | Last updated: May 18, 2021 05:34AM UTC

I am trying to install a few burp extensions but download from BAPP store fails. Have tried using upstream proxy as well. I am using corporate proxy to connect to https://portswigger.net/ but result is blank page. I am using latest version of BurpSuite Pro.

Hannah, PortSwigger Agent | Last updated: May 18, 2021 11:00AM UTC

Hi Are you able to access the BApp Store on your machine? - https://portswigger.net/bappstore If you click "Refresh list" on the BApp Store page in Burp, do you receive any error messages? If you send a request to "https://portswigger.net/bappstore/currentlist" in Repeater (you can use the context menu action, "Paste URL as request" to quickly generate a Repeater request), do you receive any error messages in the response?

Rahul | Last updated: May 18, 2021 01:38PM UTC

Hi, I can access BApp store from my machine. When I click "Refresh list" on the BApp Store page, I get error as "Failed to update BApp List" I checked Repeater request for mentioned URL, Response is 200 OK. Also in repeater tab I can see warning on left side bottom as Remote Host terminated the handshake. I also checked Burp Dashboard >> Event log . I can see errors as 1621344818666 Error Proxy [3] Socket closed 1621344815151 Error Suite [2] Communication error: portswigger.net 1621344814257 Error Suite Failed to connect to the configured Collaborator server.

Hannah, PortSwigger Agent | Last updated: May 19, 2021 11:46AM UTC

As you are using an upstream proxy, the TLS handshake between Burp and the BApp Store is failing.

Could you perform a manual install of extensions?

You can do this by downloading the BApp file from the online BApp Store, then install it using the "Manual install" button on the bottom left of the BApp Store page within Burp.

Rahul | Last updated: May 20, 2021 06:24AM UTC

Hi, Thanks for solution. I can manually install the extensions. But how do I know what is interrupting connection of Burp to https://portswigger.net. I do not face such issue with any other websites. How can I fix this issue?

Hannah, PortSwigger Agent | Last updated: May 24, 2021 09:43AM UTC

Hi If you did not need the use of the upstream proxy, then you would be able to directly download extensions from the BApp Store. Tools like Repeater do not enforce upstream trust, whereas the Collaborator and the BApp Store do.

You need to Log in to post a reply. Or register here, for free.