Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

learn more… | top users | synonyms

2
votes
1answer
58 views

Differences between Burp request and Browser - Has different responses

So I was put on an engagement over the last week and I found a potential XSS when using Burp's intruder/repeater. However, the strange thing that I noticed was that the response in Burp is different ...
1
vote
1answer
223 views

Some specific website not loading when proxy through Burp

I am conducting web application pentest in which all the traffic will go through BurpSuite. In addition, SOCKS proxy is used so all the requests are sending out from a fix company IP address. ...
1
vote
1answer
43 views

How to configure proxy settings of cellular internet for burp

I am pen testing an android app and using tethering to connect my phone to my laptop. I configured the access point settings as proxy = ipv4 address of my laptop and port = port on which burp is ...
0
votes
1answer
112 views

Issues importing Burp cert in FireFox - secure HTTS links not working

I have issues accessing HTTPS links using Burp and Firefox (all was working until sudden issue appear last week). Now when trying to access the HTTPS links I see a message: "Secure Connection Failed. ...
2
votes
0answers
40 views

Prevent external script from loading using Burp

I am using free edition of Burp Suite to analyze some requests. Suppose, website is https://www.example.com. Now, there is a javascript file in https://www.example.com/templates/scripts/xyz.js. I ...
2
votes
0answers
40 views

Burp warning whenever I write a rule?

Whenever I write rule and save it in burp it gives this warning, I am not able to find out why it warns me The rule is not in-scope for any URLs. Are you sure yu want to proceed? While the rule is ...
1
vote
0answers
19 views

Parsing/processing Burpsuite Intruder responses automatically?

So, testing some command injection fuzzing in Burp using Intruder, and each of the responses generated are around 10k with 99.5% of them being identical between each request. Is there a way to ...
0
votes
0answers
847 views

Is it possible to intercept ssl with burp on iOS 8.3

I have tried to intercept SSL connection on iOS 8.3 using BURP Proxy. I receive the error "There was a problem communicating with the secure web proxy server (HTTPS)." Is it because of some ...