New answers tagged tools
The solution is to unckeck Intercept responses.
This is no "charset" problem. You are dumping the binary password hash. You should use --binary-fields=pwdlogin (hidden option).
Everyone is going to have an idea or two. Listen to me: I have been using Burp Free since 2003 -- I have been using Burp Suite Professional since 2008. I love Burp Suite and its many contributions. The only one tool worth its weight against Burp Suite that is fully free, open-source software is Arachni. You can use it as a proxy, but it also has the most ...
You can use J-BAAh, just copy the request from burp and replace the parameter with ##1## , where 1 represents the parameter number. It is open source and available at github.
Top 50 recent answers are included