Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
0
votes
1answer
49 views

How does Burp update XSS/vulnerability scanning rules/payloads?

The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet ...
0
votes
1answer
60 views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
0
votes
0answers
26 views

How can I proxy traffic of macOS Mojave APPS using Burp Suite?

If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop ...
1
vote
1answer
76 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which running on 8080 and I also ...
0
votes
0answers
28 views

Is there a way to pause the Burp Suite Intruder midway in an attack fuzzing?

I am using the Burp Intruder to fuzz for Directory Traversal attack and I saw that one of the req was successful by the length of the response analyzed, but the payload was a huge list and I want to ...
0
votes
0answers
60 views

open redirection Dom Based

I found a vulnerability related to open redirection DOM Based in an application using Burp Suite. How do I exploit manually to ensure it exist? Could not find any proper stuff on any blogs or videos ...
2
votes
1answer
54 views

Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise “problem”)

I am diving now into WebGoat, there's this little exercise in the "general" tab calle d "http proxies" which asks you to use zap/burp to intercept and modify a request, this is what is being us asked. ...
0
votes
1answer
194 views

How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I've pentested a lot of websites and a few apps too but this app eludes them all. On the websites, when there's a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets ...
1
vote
1answer
64 views

False Positive of Cleartext Submission in (CWE-319) in Burp?

In a recent execution of a spider, Burp reported cleartext submission of a password CWE-319, but the evidence in the report is merely the preceding GET request of a non-existant page, redirected via ...
1
vote
0answers
79 views

Track HTTP(S) Network calls being made by an Android Device

I am planning to track the Network calls being made by apps and the website of an Android Device. I have used the Burp Suite tool for tracking the network calls. Until now the Android Device and the ...
0
votes
0answers
35 views

How to scan, fix, and re-test

I'm a Burp newbie, but I've been working on it for several days now and still haven't come up with a satisfactory answer to this apparently simple problem. What I want to do seems quite ...
1
vote
2answers
94 views

Monitoring the HTTP(S) calls being made from android App

I want to test for security vulnerabilities in an Android App and hence want to monitor all HTTP(S) calls being made from an Android App. I have setup BurpSuit in my Laptop and have also set up the ...
2
votes
1answer
79 views

Is there any way to keep the request in intercepting proxy for atleast a min before application says check your connection?

I just bypassed SSL pinning on an android application but the problem is application won't let me play with the request on my intercepting proxy. It says something like problem with your network or ...
0
votes
1answer
24 views

Is there a way to save state in burpsuite without logging sensitive fields like password?

At my workplace we are implementing a process so my colleagues can share the burp states of the security assessment of the project. The issue here is, sometimes we have to use personal account ...
-2
votes
1answer
49 views

Monitor data traffic in chrome:// protocols

With Burp Suite we can capture the traffic of protocols like http, https. But i want now monitor the data traffic in urls like chrome://settings
1
vote
2answers
107 views

Mutual TLS and Cert Pinning solving the same problem?

To prevent MITM from my app I will use cert pinning. To prevent having not approved parties communicate to my server I can use Mutal TLS, which actually accepting communication from trusted sources. ...
0
votes
0answers
86 views

Burp: Out Of band resource load

I scanned a web app using Burp and it reported this vulnerability. When I click on the issue it show this request and response: Request: GET / HTTP/1.1 Host: xxxxx.burpcollaborator.net Pragma: no-...
2
votes
1answer
155 views

Burp Suite - Use \n in repeater

Currently I am trying to fuzz the request I sent to Repeater. However if I put a new line (using Enter key) inside repeater's text window, burp on background really creates a crlf. My goal: Send a ...
0
votes
0answers
61 views

Bruteforce directory with Burp : 2 parameters used in 3 step macro for intruder

I try to bruteforce paths with Burp intruder but to do so I have to be authenticated and have a valid CSRF token (transmitted as a GET parameter). So what I want to do is : Call the login page to ...
1
vote
1answer
427 views

HTTP request smuggling, basic TE.CL vulnerability

Im trying to learn about http request smuggling and Im trying out the labs for burp suite. Im stuck on the TE.CL vulnerability, Ive clicked on the solution (see below:https://portswigger.net/web-...
1
vote
3answers
234 views

Can Burp be setup to intercept traffic from client application?

I have a client application installed on my Windows computer and I want to perform a MITM on this application to inspect the traffic. I understand that Burp can do the MITM for web application, but ...
0
votes
0answers
43 views

how to bypass URL encoding on XSS [duplicate]

I typed following script on the search input on the website alert() but website converted this script into <script>alert()</script> in HTML content, is there any ...
0
votes
0answers
154 views

Configure gRPC with Burp Suite

I have been given a task to do security auditing of the APIs which are running in gRPC. I am using BloomRPC for querying the gRPC Services. But there so no such option in BloomRPC to proxy the ...
1
vote
1answer
333 views

Hacker101 Spoilter #2 EASY Micro-CMS v1

I am just getting into CTF and Hacking in general. I am very confused as to why this worked when I added an apostrophe to the end it reveals the flag. I have Burp Community Edition suite going and I ...
-1
votes
1answer
151 views

Find Confirmation Code (FindBug.io) [closed]

I have solve half of the problem by decoding a base64 code that reveal the next URL(https://app.findbug.io/app/task/FinDBuG-CTF2019) but now i don't know what to find or where i tried it with ...
0
votes
1answer
74 views

Extract data from burp response and use in another request

I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires. Is there a way to automate the call and token extraction and then to ...
0
votes
1answer
477 views

Localhost intercept not working for burp suite [closed]

I configured my Firefox proxy to send my php website traffic running on localhost to burp suite for intercept but its not intercepting anything.My firefox and burpsuite configurations here.I've tried ...
2
votes
1answer
3k views

What are the differences between Burp and OWASP ZAP?

I am new to security testing and I'm confused about two web proxy tools, namely Burp and OWASP ZAP. Both seem to fulfill the same task, so what exactly are the differences between them?
3
votes
2answers
701 views

Not able to intercept traffic from nike.com login request

I'm using BurpSuite to intercept the HTTP/HTTPS requests sent when logging in on https://www.nike.com/. I'm trying to achieve this with the following step: Opening BurpSuite and Firefox Turning on ...
0
votes
0answers
650 views

Intercept mobile traffic using burp

I'm trying to intercept a mobile traffic of an android app I built using burp suite. I connect the mobile device to burp proxy, and install the CA. But I get a protocol error message, and couldn't see ...
2
votes
1answer
2k views

Why does the file “shell.php.jpg” can execute as a php file but “shell.jpg” cannot?

I am learning about file upload vulnerabilities using DVWA. After cranking the website's security level to High, the website checks both the post request's content type & file extension, so in ...
1
vote
0answers
52 views

Configure Burp to pass dynamic authentication token from the past response to the next request in intruder

I would like to reuse an authentication token (which is dynamic) between a response and a request in Burp Suite intruder. By dynamic I mean that the token is invalidated after being sent to the ...
0
votes
0answers
52 views

Burp repeater not playing request

I ran burp scanner. It said it found a with firm confidence an OS Injection vulnerability. Now I'd like to test it. In site map, I sent the request to repeater. In the repeater, the only thing I did ...
0
votes
1answer
585 views

Unable to intercept android app traffic neither in Burp Suite nor in Network Profiler. Can anyone help?

I need to perform MITM attack on an app which doesn't use HttpURLConnection and OkHttp libraries for network connection. Analysis : Configured burp on the devices, able to capture request of Chrome ...
0
votes
0answers
66 views

burpsuite “invalid security certificate”

am facing a problem in burpsuite I exported the certificate file from http://burp and installed it and nothing changed
1
vote
1answer
512 views

Prevent bypassing of SSL Pinning in android application

I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an ...
-4
votes
1answer
191 views

How to configure proxy CA certificate in browser? [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
0
votes
0answers
112 views

How to intercept packets of system apps in Android?

I am unable to capture packets of native android email app in burp suite but able to capture packets of chrome browser. I have configured the proxy of my machine with burp port(8080) on the test ...
-2
votes
2answers
162 views

Burp Suite's keeps my ip safe?

I am starting to learn how to use Burp Suite, but since it is kind of (tho I know it does more) automatic way of plugging information into a website/form, should I still use proxychain/vpn to keep my ...
1
vote
2answers
350 views

BurpSuite Brute Force Iteration

I am working on a security assessment for an online application. When testing the pin verification mechanism and possibilities of brute force, I came across a post request that looks like the below ...
2
votes
2answers
633 views

Redirect OWASP ZAP IP:Port to localhost like in Burp

I want to intercept an application. It connects to an IP and port. I have to connect to localhost:443 to make it work (there's a gateway that routes depending on the port). In Burp I was able to set ...
0
votes
0answers
396 views

How to capture non-HTTP or HTTPS URLs in Burp

I want to intercept URLs except for HTTP and HTTPS, is that possible with Burp Suite? For example, I want to get a response of following URL in Burp Suite: jar:file:///C:/Program%20Files/Mozilla%...
2
votes
0answers
482 views

How apps manage to prevent bypassing SSL pinning using Xposed framework?

We all know how to bypass SSL pinning using Xposed Framework module - SSLUnpinning. But I've found apps which cannot be bypassed this way. How do these apps prevent bypass of the SSL pinning which is ...
0
votes
2answers
63 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
2
votes
0answers
41 views

Burp Suite - Mark Issues as “Validated”

After performing a audit (formerly active and passive scan) of a web app with Burp suite I manually verify and validate the issues it identifies to rule out false positives, see what is possible with ...
1
vote
1answer
49 views

How to enumerate all drop-down options in an html form using Burp Suit Intruder

In my app there is a form with a <select> element which has several <options> to choose from. I want to get all the responses that correspond to each option available in the form. The best ...
0
votes
1answer
1k views

How to do Mobile application testing using Burp Suite on latest ios and android devices

I am trying to intercept the request with burp suite for mobile application pen testing on iOS and Android devices. Here are the settings below which I have done in below points. I made sure that my ...
0
votes
1answer
956 views

How to intercept ntlm authentication based application?

There is an internal application which authenticates based on windows credentials (NTLM Authentication). It is not intercepting while in proxy with Burp Suite and is stuck in login pop-up even after ...
0
votes
0answers
174 views

Proxying an Android application with Burp Suite

I'd like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates ...
1
vote
2answers
459 views

How do i extract data from response and use it in url for next request in Burp Intruder?

The URL is https://www.example.com/send?session=abcabcabc. When the above URL is requested, a response comes with <a> tag which contains a new URL with a different session value like https://...