Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Unable to login to the labs with the given credentials

Sreethi | Last updated: Apr 22, 2023 02:57PM UTC

Password brute-force via password change Offline password cracking For the above two labs, I entered username- weiner, password- peter. When I click on login it says invalid username or password. can anyone please suggest this?

Ben, PortSwigger Agent | Last updated: Apr 24, 2023 07:33AM UTC

Hi Sreethi, Just to clarify, the username is actually 'wiener' (the 'i' comes before the 'e') rather than 'weiner' - if you use this username, does this allow you to login to the lab?

Prasad | Last updated: Jul 24, 2023 09:14AM UTC

no

Ben, PortSwigger Agent | Last updated: Jul 24, 2023 09:15AM UTC

Hi Prasad, Just to clarify, are you also having issues logging into a lab? If so, which lab are you having trouble with?

Mustafa | Last updated: Oct 17, 2023 03:07PM UTC

I have this problem now with Basic clickjacking with CSRF token protection

Ben, PortSwigger Agent | Last updated: Oct 18, 2023 08:24AM UTC

Hi Mustafa, I have just successfully logged into this lab using the supplied credentials of wiener/peter. Can you confirm exactly what credentials you are trying to use?

Juan | Last updated: Oct 20, 2023 02:50PM UTC

Me pasó tal cual lo mismo, intenté eliminar la cuenta de wiener/peter testeando la aplicación para saber que pasaba, luego de eso intenté iniciar sesión y no me dejó decía "username or invalid password", a lo cual yo dijé "logico, borré la cuenta", pero si borro el historial y el caché seguro después de ello podré ingresar de nuevo sesión como si nada; pero no, el problema persisitó después de eso así que no sé que podría ser ni tampoco tengo la solución, ¿saben como podría solucionarlo? quedo atento gracias.

Ben, PortSwigger Agent | Last updated: Oct 23, 2023 06:58AM UTC

Hi Juan, If you have deleted the 'wiener' user then you would have to wait for your lab instance to expire and then obtain a new lab and try again. A lab instance should expire if you do not interact with the lab for around 15 minutes. At that point you should be able to launch the lab again and obtain a fresh copy of the lab with its original configuration.

Shantanu | Last updated: Apr 12, 2024 10:38AM UTC

User ID controlled by request parameter with password disclosure For the above lab, I entered username- wiener, password- peter. When I click on login it says invalid username or password. can anyone please suggest this?

Ben, PortSwigger Agent | Last updated: Apr 12, 2024 10:44AM UTC