People who code: we want your input. Take the Survey

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

Evilginx Phishlet with Json response

I am trying to make my own first practice phishlet in Evilginx. However, I face a challenge, when I send my username/password to a webpage, the app response with several cookies and a son string, I do ...
0
votes
0answers
48 views

Uploading php webshell using Burp Intruder

I am using Burp Intruder to upload a webshell to different directories. These 400 responses tell me the requests are bad. I should be getting mostly 403 responses or maybe if I'm lucky the goal ...
0
votes
0answers
26 views

Possible to automatically store responses in Proxy?

I filter some responses in the HTTP history and would like to automatically store new incoming responses somewhere on disk so I can process these data in another automated script. Is there an... ...
0
votes
0answers
77 views

Root-me won't load through Burp proxy

I am trying to access the root-me security website through Burp in order to solve some challenges, as I did many times without any problem in the past on this specific website. In order to do so, I am ...
0
votes
0answers
63 views

How to redirect ettercap or arp poisoned traffic to burp suite or mitmproxy?

I have poisoned the target using Ettercap and redirected the traffic to my IP address. The question is, how to intercept and modify this traffic using burp suite or mitm proxy? The only condition is, ...
0
votes
2answers
64 views

how to load files in TLS PASS Through in Burp Suite?

I tried to load .txt files in TLS PASS Through but it is not accepting the file type. I tried with (.txt) and (.csv) . The reason behind this is when I open a new project in Burp Suite all time it ...
2
votes
0answers
88 views

send dual request in burpsuite intruder (series)

I want to send two requests to two separate end-point which the second one is dependent on the former... end-point 1: submit a phone number (requirements: phone number) end-point 2: signup (...
0
votes
1answer
43 views

urbanairship basic Authorization found in Mobile Application Outgoing Traffic

I was testing an android application using Burp suite. When I opened the android application, an app "Outgoing Traffic" log was added in Burp suite Site map. The API request is: PUT /api/...
1
vote
1answer
67 views

How to ignore request-response pairs with a 304 status code in Burp?

I'm using Burp Pro to assess a web application that sends a requests to an particular endpoint every second. This responds to almost every request with a 304 Not Modified status code, and I'd rather ...
2
votes
0answers
69 views

What is the impact if there is Race Condition while submitting OTP?

I recently came across a web application where it was asking for an OTP after a successful login. Let the endpoint be https://www.example.com/otpcode The initial test for a brute-force of the OTP ...
1
vote
0answers
49 views

call http-webpage in local browser, where the webserver is only reachable through proxychains (as it sits in a different network)

I have the following proxychains.conf [...] [ProxyList] # add proxy here ... # meanwile # defaults set to "tor" #socks4 127.0.0.1 9050 # <ip_prox_1> http 10.10.10.100 3128 # ...
1
vote
0answers
47 views

Is there any way to fuzz a HTTP response field via Burp Intruder?

I found a privilege escalation bug in an HTTP response page and I want to fuzz one of the field with ID values that define the admin role and see if any other viable ID comes up. Is there a way to do ...
0
votes
1answer
57 views

why the website cant understand my request in http smuggling?

hi I started to find bug bounty vulnerabilities and i think i found a te.cl vulnerability in a website. i send GET / HTTP/1.1 Transfer-Encoding: chunked Host: subdomain.domain.com User-Agent: Mozilla/...
0
votes
0answers
53 views

unable to pass recaptcha test using burpsuite proxy

when I open the burpsuite proxy, it kept hit me with recaptcha , after I click submit, another one pop up, and another, and another, and so on what is wrong?
0
votes
1answer
88 views

How to use custom headers with nmap?

I am trying a bbp program, and they allow requests only with some custom headers. So I was wondering if it is possible to add custom headers to nmap requests. Things I tried: I tried using burp proxy. ...
0
votes
2answers
97 views

I found that I could delete the state parameter in an OAuth request and the response was validated and e-mail was still verified

I was fiddling around with an OAuth2.0 request on burpsuite and I found that it validated the account even after I deleted the state parameter completely and forwarded the request through burpsuite. I ...
1
vote
0answers
53 views

Decoding burp XSS DNS resolution payload

I'm testing burp against a vulnerable application as part of work for my client. There was one successful xss payload related to DNS lookup which worked on form data at point of file-upload. Here is ...
0
votes
0answers
116 views

Why Recursive Grep + Pitchfork payload doesn't work as expected in Burp Suite?

SCENARIO: I'm playing around with a .NET application. In particular I'm testing the login page. The source code contains __VIEWSTATE, __EVENTAVALIDATION, __VIEWSTATEGENERATOR. I want to try a ...
0
votes
0answers
37 views

Force BurpSuite to follow anchors during crawling / security scanning?

The target application's URIs are prefixed with a hashmark, which BurpSuite seems to ignore. This hashing strategy is pretty common in Angular applications, and I basically cannot test anything in ...
1
vote
1answer
131 views

Error in intercepting the request of an Android application

I'm trying to analyze my flutter app's network traffic so I used burp suite for intercepting. First, I'm using the proxy option of burpsuite. I set my PC's IP address and port as 8080. Also in my ...
0
votes
1answer
152 views

Any there any tools like Burpsuite that fully support HTTP/2? [closed]

Nowadays websites start migrating to HTTP/2, but Burpsuite hasn't fully support HTTP/2 yet. I know HTTPCanary is good and support multiple protocols like replaying HTTP2 and even TCP/UDP, but that ...
0
votes
0answers
310 views

MiTM using ettercap and burp suit and iptables

I'm trying to perform a MiTM attack on a local network connected device. I configured the iptables to route the incoming traffic to port 443 and port 80 so it can be captured by the Burp Suite. ...
0
votes
1answer
132 views

Burp Suite upstream proxy

Is there a way to configure burpsuite's upstream proxy direct the traffic to the local box's proxy configuration? Additionally is there a way to exclude urls from being directed to the upstream proxy.
0
votes
2answers
221 views

How does Burpsuite sitemap (find) this PHP file from a PortSwigger lab?

I am doing the PortSwigger labs and came across this one: https://portswigger.net/web-security/deserialization/exploiting/lab-deserialization-arbitrary-object-injection-in-php The first step of the ...
1
vote
1answer
318 views

Why intruder number of threads has an effect on the time delay of indiviual requests

I was solving SQL injection lab on Portswigger, and the lab was asking to exploit blind SQL injection by triggering time delays, using that to retrieve administrator password. I was making 720 ...
1
vote
1answer
839 views

Verifying client certificate by passing client cert in the header

I'm implementing client certificate authentication. My server is behind a proxy to which I have no control of. And also I don't have any control over the client side communication. During every ...
1
vote
1answer
267 views

Auto-login to refresh token in Burp Suite 2

I want to run an automatic scan on a web application made with Angular and JSNode. On this one I have access to different types of accounts. On ZAP OWASP I can select the POST request, it detects the ...
0
votes
0answers
121 views

Manipulate auto execution of Javascript since Burp can only see HTTP Requests/responses

There a javascript that is executing in my browser and it is generating session token. (This was a design requirement to the dev team Sesion token is generated on the client side - don't ask me why ...
0
votes
0answers
101 views

CORS response received in burp but not in browser console

NOTE: I am authorized to test this I was able to find a CORS vulnerability while intercepting it with burp, but cannot exploit it using browser. The request I sent in burp was: POST /xy/ HTTP/1.1 ...
1
vote
2answers
742 views

Burp Proxy vs MITM

I have recently started using Burp as a proxy for hunting bugs on websites and I see many submissions where people have intercepted and modified requests/responses to exploit certain logic flaws in ...
0
votes
0answers
112 views

Unable to intercept traffic on android application using burp suite

When I try to intercept the traffic through burp suite, the app itself won't load. This doesn't happen in some applications like Chrome and Gmail but happens on YouTube and other applications. It ...
0
votes
1answer
69 views

Understanding a Burp Capture

I am thinking of taking up ethical hacking as a hobby. So, I installed Burp Suite Community Edition and set it up with Firefox. I opened Instagram and tried to login with these details (just for ...
1
vote
0answers
315 views

Open redirection (DOM-based) on ASP.NET 4.7 Web Forms

A scan with Burp Suite has reported a possible vulnerability on all the pages of my application, which is based on ASP.NET 4.7 WebForms. the issue is: The application may be vulnerable to DOM-based ...
0
votes
0answers
89 views

Burp not intercepting live video stream

I have set up Burp proxy to intercept requests of an Android app. I am able to intercept app API calls except for live video streams. I am not aware of how the video stream is implemented but assuming ...
1
vote
1answer
158 views

MitM Traffic with Burpsuite and a Mobile Device doesnt show up anything

I try to Man in the Middle the traffic of an App to a Cloud. For this purpose I use the Burp-Suite Pro Edition. What I've done: Setup a WiFi with an Alfa-Wifi-Dongle and create_ap; shared the ...
1
vote
1answer
207 views

Firefox does not trust Burp Suite's certificates in case of accessing sharepoint online

I want to investigate requests/responses between firefox and some private mysite.sharepoint.com site which I could access using my microsoft's email and password. For this I've configured Burp Suite'...
2
votes
1answer
160 views

How does Burp Suite evaluates this request as high severity with the issue “user input evaluated as code”?

I just conducted an automated web scan with Burp Suite Pro. The scanner result indicated that our website had a high severity of code injection. It gave the following proof: However, I don't ...
-1
votes
1answer
540 views

CAPTCHA with Burpsuite or AppScan

I have an web application which uses login user password and captcha for login. Is there a way to perform vulnerability assessment using AppScan or Burpsuite tools to capture the CAPTCHA automatically ...
2
votes
1answer
5k views

“X-Original-URL” and “X-Rewrite-URL” Related Vulnerabilities

I am going through the Burpsuite Academy Training on Access Control and I came across a section I still don't fully understand. In their reading, they explain: Some application frameworks support ...
2
votes
0answers
299 views

BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26

Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
2
votes
1answer
2k views

Intercepting TCP traffic through MITM attack

I'm trying to capture TCP requests through Burp Suite with this hacky method. Basically it listens for user selected protocol requests (TCP/UDP) and then forwards them to Burp Suite (or any other ...
0
votes
0answers
158 views

How to use Burp Suite together with The BodgeIt Store?

The BodgeIt Store is a vulnerable web application for studying web development security. It can be downloaded from the internet and installed locally on your computer as a docket container. This web ...
3
votes
1answer
318 views

How URL Encoding Works?

I am learning about web security but very confused about URL Encoding, it will be big help if anyone can help. On PortSwigger, I learned that url "http://127.0.0.1/admin" can be used as "http://127.0....
1
vote
1answer
402 views

Burp Suite change value cookie

I'm trying to change the value of a cookie using the Burp option, "Match and Replace". Here is my configuration: Item: Request header Match: cookieName:.*; Replace: cookieName:myValue; Type: ...
-1
votes
2answers
1k views

Trying to extract SSL client certificate from android app

I'm trying to find out a specific request from an android application to its API server. Using Burp Suite, I get a handshake failure alert. Using fiddler it asks me to provide a custom certificate. ...
0
votes
1answer
66 views

How does Burp update XSS/vulnerability scanning rules/payloads?

The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet ...
1
vote
1answer
1k views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
1
vote
0answers
540 views

How can I proxy traffic of macOS Mojave APPS using Burp Suite?

If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop ...
1
vote
1answer
165 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
2
votes
1answer
192 views

Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise “problem”)

I am diving now into WebGoat, there's this little exercise in the "general" tab calle d "http proxies" which asks you to use zap/burp to intercept and modify a request, this is what is being us asked. ...

1
2 3 4 5