Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

-2
votes
0answers
62 views

Script for searching personal data in HTTPS request from Android [on hold]

How can I search for personal data in Burp Suite HTTP/HTTPS requests? I using Burp Suite for pen testing Android apps and I need some script for searching personal data which are transmited from ...
-1
votes
0answers
32 views

What should happen on web app UI when we drop request in Burp [closed]

Web application calling different API on its login success, Ex : Let's say if the web app has 4 pages and all the 4 APIs are being called after login success. If I drop 3 of 4 APIs request using burp,...
1
vote
1answer
74 views

Prevent bypassing of SSL Pinning in android application

I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an ...
-4
votes
1answer
47 views

How to configure proxy CA certificate in browser? [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
0
votes
0answers
48 views

How to intercept packets of system apps in Android?

I am unable to capture packets of native android email app in burp suite but able to capture packets of chrome browser. I have configured the proxy of my machine with burp port(8080) on the test ...
-1
votes
0answers
60 views

Using Burp Proxy on Tails OS

I'm trying to run burp proxy on Tails OS to take a look at some HTTP headers traffic going on between localhost and destination host. Since I can't configure this with Tor browser, because I suspect ...
-2
votes
2answers
86 views

Burp Suite's keeps my ip safe?

I am starting to learn how to use Burp Suite, but since it is kind of (tho I know it does more) automatic way of plugging information into a website/form, should I still use proxychain/vpn to keep my ...
1
vote
2answers
112 views

BurpSuite Brute Force Iteration

I am working on a security assessment for an online application. When testing the pin verification mechanism and possibilities of brute force, I came across a post request that looks like the below ...
1
vote
0answers
176 views

SQLmap check sql burp vulnerability

Burp suggests me that an application has an SQL injection point. First request: GET /restrict/menuApc.do?MVPG=ApcAssistitoTSRicercaPre&ASSISTITO_ID=*SRVZOSA40002294'&s_ELIMINATI=1&...
1
vote
2answers
154 views

Redirect OWASP ZAP IP:Port to localhost like in Burp

I want to intercept an application. It connects to an IP and Port. I have to connect to localhost:443 to make it work(theres a gateway that routes depending on the port). In Burp I was able to set ...
0
votes
0answers
99 views

How to capture non-HTTP or HTTPS URLs in Burp

I want to intercept URLs except for HTTP and HTTPS, is that possible with Burp Suite? For example, I want to get a response of following URL in Burp Suite: jar:file:///C:/Program%20Files/Mozilla%...
2
votes
0answers
246 views

How apps manage to prevent bypassing SSL pinning using Xposed framework?

We all know how to bypass SSL pinning using Xposed Framework module - SSLUnpinning. But I've found apps which cannot be bypassed this way. How do these apps prevent bypass of the SSL pinning which is ...
0
votes
1answer
145 views

SQLmap after burp possible injection point

Burp states that a GET request have surely a SQL injection point. I am using python sqlmap.py -r file_with_that_request.txt --level 5 --risk 3 --dbms=oracle but the injectiont doesn't work. Am I ...
0
votes
2answers
55 views

How to check if a list of domains contains any WordPress installation?

Does any software or any other way to detect if a website contains any WordPress installation? For example lets say we have the website example.com which is not a WordPress site, but we have a ...
2
votes
0answers
20 views

Burp Suite - Mark Issues as “Validated”

After performing a audit (formerly active and passive scan) of a web app with Burp suite I manually verify and validate the issues it identifies to rule out false positives, see what is possible with ...
1
vote
1answer
36 views

How to enumerate all drop-down options in an html form using Burp Suit Intruder

In my app there is a form with a <select> element which has several <options> to choose from. I want to get all the responses that correspond to each option available in the form. The best ...
0
votes
1answer
377 views

How to do Mobile application testing using Burp Suite on latest ios and android devices

I am trying to intercept the request with burp suite for mobile application pen testing on iOS and Android devices. Here are the settings below which I have done in below points. I made sure that my ...
0
votes
1answer
191 views

How to intercept ntlm authentication based application?

There is an internal application which authenticates based on windows credentials (NTLM Authentication). It is not intercepting while in proxy with Burp Suite and is stuck in login pop-up even after ...
0
votes
0answers
77 views

Proxying an Android application with Burp Suite

I'd like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates ...
1
vote
2answers
104 views

How do i extract data from response and use it in url for next request in Burp Intruder?

The URL is https://www.example.com/send?session=abcabcabc. When the above URL is requested, a response comes with <a> tag which contains a new URL with a different session value like https://...
3
votes
1answer
106 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
0
votes
0answers
61 views

Java http proxy burp

I have a web application which downloads and executes a jnlp file to launch an applet. Using javaws I set a proxy under the network settings at 127.0.0.1 port 8080. Is this enough to monitor through ...
1
vote
1answer
94 views

HTML payloads work on burp but not on browser

I was looking into bWAPP. In the HTML GET Injection section, I entered %25%33%63%25%36%38%25%33%31%25%33%65%25%36%31%25%37%30%25%37%30%25%36%63%25%36%35%25%33%63%25%32%66%25%36%38%25%33%31%25%33%65 ...
0
votes
0answers
118 views

Configure burp to intercept JNLP

I am monitoring a site where there is an applet. To use it, there is the download and the execution of a jnlp file. I would like to monitor the requests made from and to that file through Burp. I read ...
0
votes
1answer
80 views

No Cipher Suite In common

When i'm trying to intercept the mobile traffic using burp suite. Getting this error "No Cipher suite in Common" I tried to add all the available cipher suits in the burp but still getting this error. ...
1
vote
0answers
214 views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
2
votes
0answers
58 views

Pentest website available through per app VPN

I am trying to intercept web traffic with burp from mobile devices (Android and iPhone) that are enrolled in an MDM solution (MobileIron). There is one specific website I want to proxy, that is ...
1
vote
0answers
191 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
2
votes
1answer
63 views

DAST Output in Burp and Understanding It

I have recently upgraded to the newest version of Burp which includes the new DAST tools. I am receiving reports from the tool that it has found DOM-Based Javascript Injection, but I am having ...
1
vote
2answers
247 views

POST Method Anti-CSRF Help With Burp Suite

I am testing a web application and encountering anti-CSRF tokens within forms which is hampering fuzzing attempts using Burp Suite intruder. An anti-CSRF token appears as csrf-token within a HTML meta ...
2
votes
1answer
95 views

Burp not intercepting the intended traffic

I'm trying to test an authentication process using NFC reader as a medium. The scenario is like this, I need to go to a certain website but in order to get there, I need to verify myself using my ID ...
0
votes
2answers
121 views

XSS vulnerability through burp suite

I am getting a XSS vulnerability through burp suite but when I inject script manually I don't get the XSS vulnerability. Is this a reportable vulnerability?
3
votes
1answer
123 views

Is there a way to find out what information website queries about us? [closed]

What tool or software should I look for to find out what "fingerprinting" data a website is tracking? Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
2
votes
2answers
358 views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
0
votes
3answers
2k views

SQL Injection on POST JSON request

I have a web application vulnerable to SQL injections. I'm using BurpSuite to intercept the requests. More specifically, the data variable below is vulnerable. I added my own data to aggregates and ...
1
vote
1answer
149 views

Specifying Burp Memory

I am new to Burp Suite. While reading Burp Suite Essentials by Akash Mahajan, I came across one topic on Specifying the maximum memory Burp is allowed to use. It asks readers to allocate 2GB of spare ...
0
votes
1answer
361 views

How to prevent IDOR?

I've just gone through the video that presents "A4 Test Insecure DOR Change Secret" and even though I fully understand what the problem is, I don't know how to mitigate it. Can anyone give me an idea ...
3
votes
1answer
1k views

Optimal way to capture HTTP(S) traffic on proxy-unaware iOS applications

I am trying to capture HTTP(S) traffic from a proxy-unaware Xamarin iOS application. The current tools I have available is a Mac with a Linux Mint VM, Xcode and iOS developer tools, Burp Suite ...
1
vote
2answers
802 views

DVWA: “Hacking attempt detected…”

Hello and good evening, i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA. For the moment, i am learning the ...
0
votes
1answer
110 views

Modifying requests using Burpsuite considered to be valid security vulnerability?

I would like to know if intercepting and modifying requests using Burpsuite before reaching server is considered as vulnerability. In our web based and mobile applications, adequate security measures ...
1
vote
0answers
65 views

How I can use perl + burp? [closed]

How can I use [any]-perl script for pentesting (for example: script for subdomains enumeration)? How to redirect output from a perl-script to burp? This is possible? How can this architecture be ...
2
votes
0answers
705 views

Using burp suite, how can I intercept traffic from one localhost port, but not another one

I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
4
votes
2answers
2k views

Burpsuite: just passthrough firefox detect portal

When I enable Burpsuite's Proxy I continiously get http GET requests for firefox's detectportal as seen in the following image: How I can configure it to somehow just pass though theese requests ...
1
vote
1answer
241 views

iOS traffic not shown in proxy when SSL pinning enabled

I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
0
votes
1answer
49 views

Why are some cookies/data changes (e.g. via Burp) persistent and some are not?

I am not a developer, so please forgive my ignorance. Can someone explain why some cookies can be manipulated and submitted via Burpsuite proxy and some cannot? Is there something in JS (or whatever ...
3
votes
1answer
370 views

Burp suite interception bypass

I am trying to intercept application layer traffic using network level attacks. In particular, I have stumbled across this interesting article here. Link Briefly, it uses ARP poisoning to make ...
1
vote
1answer
5k views

Can't Download Burp's CA Certificate from http://burp [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
1
vote
0answers
515 views

Burp suite “Unrecognized SSL message, plaintext connection?” error

While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying: Unrecognized SSL message, plaintext connection? I have the certificate installed on ...
2
votes
1answer
78 views

Decoding requests from potentially malicious Android app

I have recently been doing some security evaluation work on our Android applications, by proxying all the communication through Burp Suite. I noticed one of our devices was sending requests to a ...
2
votes
0answers
858 views

how to fix Out-of-band resource load (HTTP) issue identified by BURP scan

I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0). BURP Scan has identified one issue in my web application. Issue is something like ...