Support Center

Burp Community

See what our users are saying about Burp Suite:

How do I?

New Post View All

Feature Requests

New Post View All

Burp Extensions

New Post View All

Bug Reports

New Post View All
Documentation

Burp Suite Documentation

Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.

Full Documentation Contents Burp Projects
Suite Functions Burp Tools
Options Using Burp Suite
Extensibility

Burp Extender

Burp Extender lets you extend the functionality of Burp Suite in numerous ways.

Extensions can be written in Java, Python or Ruby.

API documentation Writing your first Burp Suite extension
Sample extensions View community discussions about Extensibility

How Do I?

Make a new post

  • Received fatal alert: handshake_failure

    Hi, Got this error while trying to intercept via Burp on Windows 8.1 "Received fatal alert: handshake_failure"

    2 Agent Answers    1 Community Answer
    Jan 25, 2017 01:05PM UTC
  • modifications visible in the proxy

    Hello, I would like to implement a simmilar extension like this example: https://github.com/monikamorrow/Burp-Suite-Extension-Examples/blob/master/Example1FindReplace/BurpExtender/src/burp/BurpExtender.java However, I would like to see the modifications of the request in the interception proxy window before it is sent to the server. Hence, I would like to catch the request, modify it, see it...

    3 Agent Answers    2 Community Answers
    Jan 23, 2017 04:01PM UTC
  • how to configure the session management

    Hi, Regarding session management, I would like to confirm followings: (1) is it possible to configure login macro to do following: To login, I need to issue three different commands, assume a, b, c command a will get back cookie_a. command b will use the cookie_a, and get back cookie_b. command c will use both cookie_a and cookie_b, and get back 3 more cookies cookie_c1, cookie...

    1 Agent Answer    0 Community Answer
    Jan 20, 2017 03:43PM UTC
  • active scan and passive scan grayed out

    Hello, I am new to Burp Suit application and using you tube to learn how to use it. I did a capture of a website but when I click on index.php both do active and passive scan is grayed out. Can anyone help suggest how can I enable both active and passive scan? Thank You

    1 Agent Answer    0 Community Answer
    Jan 20, 2017 12:18AM UTC
  • Connection types

    Hello. In every single site my connection is closed is it ok?Can i use burp with closed connection or there is something wrong

    1 Agent Answer    1 Community Answer
    Jan 18, 2017 01:23PM UTC
  • Config-file parameter on MacOS

    Hi, How can I specify --user-config-file on MacOS ? Thanks for reply

    2 Agent Answers    1 Community Answer
    Jan 18, 2017 11:36AM UTC
  • Proxy service not starting while port is free

    Hi, I have been testing a thick client application, but while i am trying to start the proxy listener on port 80, It says "Failed to start proxy service on 127.0.0.1:80. Check whether another service is already using this port". I have checked with netstat -apn command on windows that no service is running on port 80. For more verification, i have started netcat on port 80, it is ...

    1 Agent Answer    0 Community Answer
    Jan 18, 2017 10:52AM UTC
  • not intercepting android traffic

    i tried everthing specifed in burp documentation but still burp is not intercepting the android mobile traffic. i checked in cmd and it says that its listening to 0.0.0.0:8082 but can not obtain the ownership information. Please tell me how to fix this.

    1 Agent Answer    0 Community Answer
    Jan 18, 2017 07:42AM UTC
  • Firefox and SEC_ERROR_REUSED_ISSUER_AND_SERIAL

    Firefox 50.1.0, Mac OS X 10.12.2, Burp Suite 1.7.16 (from tarball, never got the hang of the mac package). I started receiving this for www.facebook.com requests whilst scanning a server that linked out to Facebook using the intercepting proxy. Tried various things, but ended up having to delete old CA, regenerate the CA Cert, importing it, and restarting firefox, and it is working again. ...

    2 Agent Answers    0 Community Answer
    Jan 17, 2017 12:42PM UTC
  • scan report

    Hi, I created a site map and saved the state. Is there a way to automatically send this site map to active scan and then automatically create a report? I noticed I can schedule the task for scan, but not for generating the scan report. Thanks

    2 Agent Answers    1 Community Answer
    Jan 15, 2017 06:10PM UTC