How do I? - Burp Suite User Forum

How to force burpsuite to use HTTP verion as required (Particularly Repeater)

Hi Team, How to force burpsuite to use HTTP version as required (Particularly Repeater)? When I tried to make it with HTTP/1.1 in repeater it's automatically changing to HTTP/2 The below option doesn't work in this...

Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Hi, referring to the lab I wrote in subject, I am following lab solution and either I do something wrong or there is some bug. I am on the Tech Gifts page, and trying this address directly from my browser (blablabla=some...

Reset the learning progress

How to reset all the learning progress back to zero ?

I cannot open Burp browser on Kali

I could not open the Burp browser on Kali. I am running Kali Linux on the VMware Workstation 17 pro. Whenever I started my Burp Suite, there would be a prompt that told me the JRE 17 version error or something. Then when I...

Lab and level progress reset

Requesting for a lab and level progress reset in Portswigger academy to 0.

Modify / Delete exsiting resource pool?

Hi, I've been searching for a way to do these tasks, but didn't find any, Did I miss anything? Regards,

burpsuite_pro_v2024.2.1.5.jar is crashing

Hi I noticed that the latest release of burpsuite_pro_v2024.2.1.5.jar is crashing and unable to run on windows 11. Whereas burpsuite_pro_v2024.1.1.6.jar works okay. Please help. Thank you.

ASVS v4 coverage

In many ways Burp is a black box for the user. It does scan for a lot of issues, but the user does not know exactly what is scanned and how, unless one enables a lot of request logging. Now, OWASP ASVS v4 has a list of...

Clear history in Burp Professional

When I cleared "HTTP Proxy" under the proxy tab, I can still search intercepted records and can see the burp file is still around 20GB. How could I really delete the history so that I only keep configurations such as in...

Resource Not Found - academy exploit server

iam facing the resource not found academy exploit server error at Basic clickjacking with CSRF token protection!

Renew license

Hello, I already installed Burp suite year ago and it is expired. I Bought a new license and tried to renew it now but unfortunately it gives me an error message saying, "No More Activation for this license." Appreciate...

Auto import and enable BChecks that are stored in my Git Repo

Is there a way through which I can import Bchecks automatically from my GitHub repo and also auto enable it? I don't want to manually go to Bcheck Helper tab and import the Bcheck manually.

network is unreachable error

every time i use my phone's data, it works good with burp for some time but after an hour, it shows 'network is unreachable'. If i try again after some time, it'll again start working

Issue Accessing Examity

I recently updated the email associated with my Burp account, where I've already purchased an exam. However, when attempting to access Examity, I encountered an error stating "invalid user," despite having completed my...

failed to create burp project: cannot parse null string.

os : windows version: burp suite community edition v2023.9.4 error : an error occurred when starting a project with the selected options failed to create burp project: cannot parse null string. i don't have any...

Basic clickjacking with CSRF token protection remains unsolved unless adding 'delete-account' to end of url?

hello i followed the instructions to the labs as well as the community solutions video but did not get the lab solved. in burp's chromium browser it remains at login page instead of account page with 'delete account'...

Doesn't Burp Scanner use cookie jars?

Hello! I've encountered several issues during the crawling phase. I used the Burp Suite Chrome extension to record the login sequence and started crawling. When I check the live view, it seems like the login is...

Basic clickjacking with CSRF token protection remains unsolved

i saw through other posts the burp embedded browser is not working and i tried through firefox with the same issue , only showing login screen instead of account screen with delete button. i was able to get the correct...

APIs to create/import Bchecks without having to navigate through UI

Is there a way or any APIs that can help me automate the process of BCheck import/creation without having to navigate through the UI.

Find pages that should be protected by a session cookie

I'm using burp suite pro and an authenticated scan generates the target map of my web app. I want to automate a check to find pages that generate a valid response (non 303) when a session cookie is not provided. I've used...