Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

-1
votes
0answers
18 views

Error occur when loading extension SSL Scanner in Burp Suite

I am trying to load SSL Scanner extension to burp suite extender and I am receiving the following error: java.lang.Exception: Failed to load Python interpreter from Jython JAR file at burp.ohg.&...
3
votes
1answer
49 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
0
votes
0answers
15 views

Java http proxy burp

I have a web application which downloads and executes a jnlp file to launch an applet. Using javaws I set a proxy under the network settings at 127.0.0.1 port 8080. Is this enough to monitor through ...
1
vote
1answer
50 views

HTML payloads work on burp but not on browser

I was looking into bWAPP. In the HTML GET Injection section, I entered %25%33%63%25%36%38%25%33%31%25%33%65%25%36%31%25%37%30%25%37%30%25%36%63%25%36%35%25%33%63%25%32%66%25%36%38%25%33%31%25%33%65 ...
0
votes
0answers
35 views

Configure burp to intercept JNLP

I am monitoring a site where there is an applet. To use it, there is the download and the execution of a jnlp file. I would like to monitor the requests made from and to that file through Burp. I read ...
0
votes
1answer
43 views

No Cipher Suite In common

When i'm trying to intercept the mobile traffic using burp suite. Getting this error "No Cipher suite in Common" I tried to add all the available cipher suits in the burp but still getting this error. ...
1
vote
0answers
55 views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
2
votes
0answers
43 views

Pentest website available through per app VPN

I am trying to intercept web traffic with burp from mobile devices (Android and iPhone) that are enrolled in an MDM solution (MobileIron). There is one specific website I want to proxy, that is ...
1
vote
0answers
152 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
2
votes
1answer
40 views

DAST Output in Burp and Understanding It

I have recently upgraded to the newest version of Burp which includes the new DAST tools. I am receiving reports from the tool that it has found DOM-Based Javascript Injection, but I am having ...
1
vote
2answers
127 views

POST Method Anti-CSRF Help With Burp Suite

I am testing a web application and encountering anti-CSRF tokens within forms which is hampering fuzzing attempts using Burp Suite intruder. An anti-CSRF token appears as csrf-token within a HTML meta ...
0
votes
0answers
36 views

Cross Origin Resource Sharing null vs wildcard?

I am testing an application that uses widget. These widgets are placed in the customer websites to use as some sort of tracking clicks device and returns some data too, therefore it is necessary to ...
2
votes
1answer
74 views

Burp not intercepting the intended traffic

I'm trying to test an authentication process using NFC reader as a medium. The scenario is like this, I need to go to a certain website but in order to get there, I need to verify myself using my ID ...
0
votes
2answers
91 views

XSS vulnerability through burp suite

I am getting a XSS vulnerability through burp suite but when I inject script manually I don't get the XSS vulnerability. Is this a reportable vulnerability?
3
votes
1answer
115 views

Is there a way to find out what information website queries about us? [closed]

What tool or software should I look for to find out what "fingerprinting" data a website is tracking? Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
2
votes
2answers
192 views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
0
votes
3answers
705 views

SQL Injection on POST JSON request

I have a web application vulnerable to SQL injections. I'm using BurpSuite to intercept the requests. More specifically, the data variable below is vulnerable. I added my own data to aggregates and ...
0
votes
1answer
83 views

Specifying Burp Memory

I am new to Burp Suite. While reading Burp Suite Essentials by Akash Mahajan, I came across one topic on Specifying the maximum memory Burp is allowed to use. It asks readers to allocate 2GB of spare ...
0
votes
1answer
124 views

How to prevent IDOR?

I've just gone through the video that presents "A4 Test Insecure DOR Change Secret" and even though I fully understand what the problem is, I don't know how to mitigate it. Can anyone give me an idea ...
3
votes
1answer
562 views

Optimal way to capture HTTP(S) traffic on proxy-unaware iOS applications

I am trying to capture HTTP(S) traffic from a proxy-unaware Xamarin iOS application. The current tools I have available is a Mac with a Linux Mint VM, Xcode and iOS developer tools, Burp Suite ...
1
vote
2answers
494 views

DVWA: “Hacking attempt detected…”

Hello and good evening, i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA. For the moment, i am learning the ...
0
votes
1answer
91 views

Modifying requests using Burpsuite considered to be valid security vulnerability?

I would like to know if intercepting and modifying requests using Burpsuite before reaching server is considered as vulnerability. In our web based and mobile applications, adequate security measures ...
1
vote
0answers
57 views

How I can use perl + burp? [closed]

How can I use [any]-perl script for pentesting (for example: script for subdomains enumeration)? How to redirect output from a perl-script to burp? This is possible? How can this architecture be ...
2
votes
0answers
382 views

Using burp suite, how can I intercept traffic from one localhost port, but not another one

I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
4
votes
2answers
725 views

Burpsuite: just passthrough firefox detect portal

When I enable Burpsuite's Proxy I continiously get http GET requests for firefox's detectportal as seen in the following image: How I can configure it to somehow just pass though theese requests ...
1
vote
0answers
137 views

iOS traffic not shown in proxy when SSL pinning enabled

I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
0
votes
1answer
45 views

Why are some cookies/data changes (e.g. via Burp) persistent and some are not?

I am not a developer, so please forgive my ignorance. Can someone explain why some cookies can be manipulated and submitted via Burpsuite proxy and some cannot? Is there something in JS (or whatever ...
3
votes
1answer
270 views

Burp suite interception bypass

I am trying to intercept application layer traffic using network level attacks. In particular, I have stumbled across this interesting article here. Link Briefly, it uses ARP poisoning to make ...
1
vote
1answer
3k views

Can't Download Burp's CA Certificate from http://burp [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
0
votes
0answers
191 views

How can I sniff the Visual Studio Code traffic using BURP tool?

I'm using Visual Studio Code latest version for writing Integration Tests. The tests are written in Typescript and all are passing when I run it in VS Code tool. Now I want to scan the traffic using ...
1
vote
0answers
366 views

Burp suite “Unrecognized SSL message, plaintext connection?” error

While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying: Unrecognized SSL message, plaintext connection? I have the certificate installed on ...
2
votes
1answer
67 views

Decoding requests from potentially malicious Android app

I have recently been doing some security evaluation work on our Android applications, by proxying all the communication through Burp Suite. I noticed one of our devices was sending requests to a ...
2
votes
0answers
600 views

how to fix Out-of-band resource load (HTTP) issue identified by BURP scan

I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0). BURP Scan has identified one issue in my web application. Issue is something like ...
0
votes
0answers
467 views

Vega says SQL injection, SQL Map doesn't find anything

I have been pen testing our website and Vega pointed me to a sql injection in our login form. I tried to use burpsuite and sql map to test for the injection. I haven't gotten anywhere though. Here'...
1
vote
0answers
921 views

Failed to connect to www.google.co.in:443 error in burp suite?

I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
2
votes
2answers
430 views

Reflected XSS only works through Burp Repeater because of URL encoding

I am able to get reflected XSS through burp repeater using a GET request. I then click on show response in browser and I am able to get an XSS alert. But when I manually go to the URL in my browser ...
1
vote
1answer
92 views

Why request and response calls in my burp suite python plugin come in such random order?

So I am trying to write this burp plugin using jython and python for burp suite. Now in the processHttpMessage body, I found before a proper execution of the entire method takes place for one request ...
1
vote
0answers
528 views

Using burp-rest-api, how do I log into my web application in order to scan for vulnerabilities?

I am using the VMWare-developed Burp API (https://github.com/vmware/burp-rest-api) in order to try to automate web application scanning for my application. For an example, if I was attempting to test ...
3
votes
1answer
2k views

How to intercept and replace request URL through Burp Proxy?

I've got a mobile app to test, and the url where requests from mobile app are sent is mapi.example.com, but the company told me that it would be great if I could send all requests to mapitest.example....
4
votes
1answer
412 views

Preventing a Burp and Intercept

I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
3
votes
3answers
1k views

Web App Pentesting: When enumerating website directories and files, how to tell if HTTP 200 is a valid page, or a failure page?

Suppose a web app is being tested where all the functionality is behind a login. One of the tests to be run is to check whether any of the pages are available without log-in. We try the actual url ...
0
votes
1answer
3k views

Check for insecure CORS settings with cURL

I'm trying to verify the CORS settings of a website using cURL. The following command should let me check whether the CORS settings can be considered as secure or if requests may be made across ...
0
votes
1answer
412 views

Intercepting with Burp does not work - alternative ways

When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
-1
votes
2answers
2k views

Chrome and Firefox showing errors even after importing latest CA certificate for Burp Suite

I am using Chrome 61.0.3163.100 and Firefox 39 on Windows 7 32-bit with Burp Suite v1.7. I have imported latest CA certificate for Burp Suite. In spite of which it's not working for sites with HSTS ...
1
vote
2answers
311 views

Pentesting web applications with unique strings in URL

I would like to get your thoughts/inputs on what approach one can adopt in order to perform penetration testing on a web application which has unique strings appended in every HTTP request. Every ...
0
votes
1answer
1k views

Host Header Attack -> Password Reset Poisoning -> ASP.NET Web API 2 hosted as Azure App Services

I'm currently testing a site where the host header is used for creating a recovery email link. However, when I try to manipulate the host header in Burp I get an HTTP 400 message saying I'm using an ...
3
votes
1answer
817 views

How to use Burp macros to pass parameters to intruder

My issue is that I am attempting to fuzz a 2 stage login for a custom webapp. What I need to do is GET for the initial page which will provide me with an anti-csrf token and a sessionID. From there ...
0
votes
1answer
320 views

How to configure Burp Suite if system proxy is handled by websense and application can only be accessed through IE?

I need to capture a traffic of the application that is compatible only for IE browser, and the proxy server is handled by websense. Thus, system proxy can't be set. Is it possible through Upstream ...
0
votes
1answer
199 views

WAFDetect Extension of Burpsuite

I am creating a list of tools for waf fingerprinting. I have installed waf-detect plugin from bapp store in burpsuite. This plugin runs in the background and create passive scanner issues when WAF ...
1
vote
0answers
169 views

Burpsuite proxy on the same network

Scenario: A test server has a deployed build on there ready for testing, can i use burpsuite/ZAP on my local computer if the server is on the same network? Am i somehow skewing the results and the ...