How do I? - Burp Suite User Forum

Configuration: How to intercept mobile device traffic with burpsuite pro

Hi community , I am trying to intercept the traffic of my mobile device with Burpsuite Pro. This was integrated and working fine, but due to some reason it's not working now. The case is that I configured the device and...

hi, i want to resete all my labs

I get Connection reset error message on every page

Hi there, I recently installed burp suite on my macbook pro and when I visit any URL, I get connection reset error. When I go to the URL and make intercept on, I see a GET request (when I go to google.com for example). But...

update commands ?

Hello everyone, what is the complete update commands for Linux to update Burp suite there is just too much convoluted information out there.

Academy Progress Reset

Hello :) Can you please reset my progress on the labs and learning materials?

Validating SQL Injection vulnerability reported by BurpSuite

Hi, While scanning our website with Burp Suite we found there is SQL injection vulnerability. I tried SQLMAP to confirm the vulnerability, but it reported false positive. I tried playing around with few switches of SQLMAP...

Scan for MFA being required (or not required) on a resource

I am trying to figure out if Burp Suite Pro would be able to give me a report on whether or not a resource is requesting (or not requesting) MFA on all authentication possibilities that are detected. Would this be something...

Writing Bambda Help

Hello, I'm attempting to write a bambda. The filter will search for requests that are to /intern/api and then if the headername contains x-name add a note + highlight the request. The issue im facing is that the filter...

BSCP Exam

Hi, since linux is not supported by examinity, can I complete the identification process on a windows host, and the actual exam on a *different* linux based machine? Thanks in advance.

temporary project in memory

I created a new project as a temporary. While I was working, the computer suddenly shutdown. After the start, I see the date in the temp files. how can I open that temp file now?

The Macro Recorder cannot select more than one request.

Hi, I have a problem with the macro recorder where I can't select more than one request. So I tried: Session > Session Handling Rules > Add. In the session handling rules, I changed the scope to URL Scope > Include all...

How to reset a lab

Hello Support, I was trying the "Lab: Basic clickjacking with CSRF token protection" but I tried to intercept server response and changed the post for change email with delete account. Now I'm unable to login using the...

Filter out results based on response size? websockets history

Is there a way to FILTER out any responses that are of Size X or less? I get a lot of noise in the WebSockets History that I don't want to see. Anyway to not show responses of size X or less?

Please reset all of my academy progress

I'm returning from a long break and want to start fresh pls. Thank you.

Reflected XSS protected by very strict CSP, with dangling markup attack - NO HTTP/ DNS from Victim

Hi Team, Hope you are doing well. It might just probably be me, but while solving the lab, I can verify the solution is working for me, if I portrait as a victim, and can see my packets come through, but not for the...

BurpSuite severity rating vs CVSS 3.1 rating

Hi, would like to find out how BurpSuite calculate the score for vulnerability and provide the severity rating? There seems to be a difference between CVSS 3.1 rating. Thanks.

Labs are not accessable

Hi Team, When i try to access a lab it takes too long to respond, few of the times it works not always. Installed the CA, made the changes in the browser (about:config security.ssl.enable_ocsp_stapling) in...

Detect Authentication Type

Hello everyone, I hope you all doing well, I am newbie and I apologize if my question seems basic or if it has already been asked before. I tried searching but I couldn't find the exact information I'm...

Cookie misconfiguration

I am getting cookie when loading login page, as below in burp REQUEST:- cookie: visitor=531543254325423654236 like above. so now question is whether above cookie is vulnerable or not whether i can report it to developers...

Reset labs

Can you please reset my all labs?