Support Center

Burp Community

See what our users are saying about Burp Suite:

How do I?

New Post View All

Feature Requests

New Post View All

Burp Extensions

New Post View All

Bug Reports

New Post View All

Burp Suite Documentation

Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.

Full Documentation Contents Burp Projects
Suite Functions Burp Tools
Options Using Burp Suite

Burp Extender

Burp Extender lets you extend the functionality of Burp Suite in numerous ways.

Extensions can be written in Java, Python or Ruby.

API documentation Writing your first Burp Suite extension
Sample extensions View community discussions about Extensibility

Bug Reports

Report a bug

  • Slow Website Loading and App Content Loading in iOS Device with Proxy Configured

    Hi, I'm using an iMac with the Proxy Listener set up and have set it up correctly on my iOS device. I can see some of the http history appearing in the listener when websites are browsed in the browser, although it is slower to load than without the proxy. However, apps like Facebook or Reddit don't manage to load any content at all.

    1 Agent Answer    0 Community Answer
    May 17, 2018 12:28PM UTC
  • Inconsistent Site Map behaviour / missing requests

    Our Burp Suite (latest professional, default settings, no extensions) "Site map" shows an inconsistent behavior for displaying or hiding requests (without filter, i.e. "Showing all items"). According to the documentation the Site Maps shows "All of the resources that have been directly requested via the Proxy." [1] However, the behavior differs between request ...

    1 Agent Answer    0 Community Answer
    May 17, 2018 10:10AM UTC
  • Burp collaborator issue when using upstream proxy

    Dear Sir, I saw that the burp collaborator support upstream proxy during the healt check, in my current setup the health check is fully green. Using our collaborator server. But the in the alert window I continue to get "The Burp Collaborator server used by the Burp Collaborator client is not reachable, change the settings to use this feature." It's possible that the health ch...

    2 Agent Answers    2 Community Answers
    May 14, 2018 01:16PM UTC
  • input suggestion boxes not being destroyed

    Occasionally, an input suggestion box is not destroyed if an item is not selected from it. It then stays on screen on a higher layer than the window that created it, if this is the main Burp window then it gets quite annoying as it can end up covered in white boxes. It happens for me in Ubuntu running Gnome 3 and a quick ask on Twitter shows it is happening for other Linux (Kali was mentioned) ...

    3 Agent Answers    5 Community Answers
    May 14, 2018 12:52PM UTC
  • Making posts

    When I create some ticket in web GUI = Public post, for a couple of months now I'm taken to the 2nd step, but the Topic automatically changes as well as the subject, which includes message. I'll try to upload screenshot for you to see. At the moment I use Chrome Version 66.0.3359.139 (Official Build) (64-bit). Thanks, Andrej

    3 Agent Answers    3 Community Answers
    May 10, 2018 12:42PM UTC
  • discovery scan regards "301 moved permanently" as a success

    I've tried using the "discovery" feature but tend to find it's not particularly useful because of its tendency to regard common methods of redirecting to login forms as a "success", meaning it fills the site map with false hits. At the moment I'm on a fairly unadventurous site and am getting "301 moved permanently" responses to any access to content tha...

    1 Agent Answer    0 Community Answer
    Apr 30, 2018 03:37PM UTC
  • HTML formatter indents incorrectly

    The formatter thinks "<base>" need a close tag, but actually "base" is an empty element, as explained in clearly. Everything under "<base>" should not have indented.

    1 Agent Answer    0 Community Answer
    Apr 24, 2018 08:57PM UTC
  • NTLM Authentication Issues in 1.7.33

    Our Red Team discovered a bug in webapps that utilize NTLM authentication. The NTLM auth requests were not being properly sent from Burpsuite 1.7.33 and access was consistently denied with working credentials. Taking Burp out of the chain resulted in successful authentication in Chrome, Explorer, or Firefox. The NTLM authentication was found to be working with Zap as the intercepting proxy too.

    1 Agent Answer    0 Community Answer
    Apr 23, 2018 03:13PM UTC
  • Huge project files when scanning

    Hi, I'm using Burp Pro 1.7.33 and I noticed that the scanner is generating huge amounts of project data with no apparent reason. I'm talking about 1GB per minute more or less for a single scan which has the Burp Collaborator disabled. My scan generated around 3000 requests and the project file went from 30MB to 12GB. Is there a reason for the huge disk space increase? What's cu...

    4 Agent Answers    4 Community Answers
    Apr 16, 2018 04:28PM UTC
  • Scanner Cookies Error

    Hi, I'm using Burp Professional 1.7.33. MacOS ver. Burp suite logged the first cookies for Scanner. I logout from website and I sign in with different membership. After I'm using Scanner. But cookies not true, because payloads have first cookies. So, scanner not working true. I'm sorry for my bad English. Thanks :)

    1 Agent Answer    0 Community Answer
    Apr 11, 2018 04:56PM UTC