Questions tagged [burp-suite]
Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.
65
questions with no upvoted or accepted answers
3
votes
0
answers
341
views
Pentest website available through per app VPN
I am trying to intercept web traffic with burp from mobile devices (Android and iPhone) that are enrolled in an MDM solution (MobileIron). There is one specific website I want to proxy, that is ...
- 31
3
votes
0
answers
3k
views
how to fix Out-of-band resource load (HTTP) issue identified by BURP scan
I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0).
BURP Scan has identified one issue in my web application. Issue is something like ...
- 31
2
votes
0
answers
342
views
What is the impact if there is Race Condition while submitting OTP?
I recently came across a web application where it was asking for an OTP after a successful login.
Let the endpoint be https://www.example.com/otpcode
The initial test for a brute-force of the OTP ...
- 189
2
votes
0
answers
711
views
BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26
Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
- 1,512
2
votes
2
answers
589
views
Local Burp Proxy not showing routed packets
I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62.
I am trying to route my all packets from my wlp2s0 interface to burp proxy which is running on 8080. I also ...
- 217
2
votes
0
answers
845
views
How apps manage to prevent bypassing SSL pinning using Xposed framework?
We all know how to bypass SSL pinning using Xposed Framework module - SSLUnpinning. But I've found apps which cannot be bypassed this way. How do these apps prevent bypass of the SSL pinning which is ...
- 21
2
votes
0
answers
106
views
Burp Suite - Mark Issues as "Validated"
After performing a audit (formerly active and passive scan) of a web app with Burp suite I manually verify and validate the issues it identifies to rule out false positives, see what is possible with ...
2
votes
0
answers
2k
views
Using burp suite, how can I intercept traffic from one localhost port, but not another one
I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
- 301
2
votes
0
answers
869
views
HTTP proxy for smart card based SSL
I am trying to pentest a web application, which seems to be using the user's smartcard for building up the SSL tunnel, and by that implementing smartcard authentication. My problem is that I haven't ...
- 59
2
votes
0
answers
5k
views
Intercepting hydra with burp suite
I'm using burp suite as a proxy and when I run hydra, burp suite should be able to catch that and log it in HTTP history, but instead of that I get the error
Can not connect [unreachable]
I tried ...
- 319
2
votes
0
answers
347
views
Burpsuite - CSRF Token Macro
I implemented a website using the vaadin-framework. When I send a request to my server, there is some data in my POST-Request which looks like:
{"csrfToken":"3df2f528-15c7-434c-8505-539be1c44157","...
- 161
2
votes
0
answers
283
views
Is it possible to use Burp to show hidden AngularJS elements, that are hidden using "ngHide"?
I’m performing an audit of an AngularJS application that uses Angular's ngShow and ngHide to show and hide elements on a page. Is it possible to use Burp Proxy, Burp Macros, or another tool to ...
- 21
1
vote
0
answers
44
views
How can I manipulate certain server side responses? Specifically Ajax Responses? XXE Attack? Hybrid DNS Resolution?
I would like to be able to switch back and forth between the real DNS and maybe setting a local DNS entry so I can manipulate AJAX responses for code security checks.
For instance if the server ...
- 141
1
vote
0
answers
147
views
How to reproduce following POC of dom based open redirection Vulnerability Flagged by burp suite scan
During scan, the burp suite flagged DOM open redirection vulnerability with the following POC. How can I reproduce it?
Data is read from document.referrer and passed to xhr.send.
The following value ...
- 11
1
vote
0
answers
266
views
Changing referer value in burp request has no impact on the response
I am testing a request/response of an application using the burp suite and found that changing the Referer value has no effect on the response.
The Referer contains the URL along with the unique ID of ...
- 23
1
vote
0
answers
314
views
Invalid Target in Intruder
starting with Burp Suite and trying to breach DVWA, I am bugged with this error: "Invalid Target".
Damn Vulnerable Web App is actually hosted on the private net as Burp shows:
Where am I ...
- 193
1
vote
0
answers
270
views
Needing help intercepting local SSL traffic on a difficult Android app
I'm trying to intercept traffic from an Andriod app.
I've forwarded ports 80, 443, 6699 and 6698 on Kali to a listener port and set up arp-spoofing. I'm using BurpSuite on the same computer to listen ...
- 11
1
vote
1
answer
129
views
urbanairship basic Authorization found in Mobile Application Outgoing Traffic
I was testing an android application using Burp suite. When I opened the android application, an app "Outgoing Traffic" log was added in Burp suite Site map. The API request is:
PUT /api/...
- 319
1
vote
0
answers
102
views
call http-webpage in local browser, where the webserver is only reachable through proxychains (as it sits in a different network)
I have the following proxychains.conf
[...]
[ProxyList]
# add proxy here ...
# meanwile
# defaults set to "tor"
#socks4 127.0.0.1 9050
# <ip_prox_1>
http 10.10.10.100 3128
# ...
- 111
1
vote
0
answers
127
views
Is there any way to fuzz a HTTP response field via Burp Intruder?
I found a privilege escalation bug in an HTTP response page and I want to fuzz one of the field with ID values that define the admin role and see if any other viable ID comes up. Is there a way to do ...
- 11
1
vote
0
answers
263
views
Decoding burp XSS DNS resolution payload
I'm testing burp against a vulnerable application as part of work for my client. There was one successful xss payload related to DNS lookup which worked on form data at point of file-upload. Here is ...
- 11
1
vote
0
answers
844
views
Open redirection (DOM-based) on ASP.NET 4.7 Web Forms
A scan with Burp Suite has reported a possible vulnerability on all the pages of my application, which is based on ASP.NET 4.7 WebForms.
the issue is: The application may be vulnerable to DOM-based ...
- 121
1
vote
0
answers
990
views
How can I proxy traffic of macOS Mojave APPS using Burp Suite?
If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info. Instead, I get dozens of results talking about how to proxy iOS or Android apps. I am talking about desktop ...
- 1,089
1
vote
0
answers
129
views
Track HTTP(S) Network calls being made by an Android Device
I am planning to track the Network calls being made by apps and the website of an Android Device.
I have used the Burp Suite tool for tracking the network calls.
Until now the Android Device and the ...
- 111
1
vote
0
answers
1k
views
Burp: Out Of band resource load
I scanned a web app using Burp and it reported this vulnerability. When I click on the issue it show this request and response:
Request:
GET / HTTP/1.1
Host: xxxxx.burpcollaborator.net
Pragma: no-...
- 700
1
vote
0
answers
164
views
Configure Burp to pass dynamic authentication token from the past response to the next request in intruder
I would like to reuse an authentication token (which is dynamic) between a response and a request in Burp Suite intruder.
By dynamic I mean that the token is invalidated after being sent to the ...
- 11
1
vote
0
answers
508
views
Capturing HTTP Traffic Through Proxy Sever
While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
- 951
1
vote
0
answers
3k
views
Burp suite "Unrecognized SSL message, plaintext connection?" error
While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying:
Unrecognized SSL message, plaintext connection?
I have the certificate installed on ...
- 481
1
vote
0
answers
6k
views
Failed to connect to www.google.co.in:443 error in burp suite?
I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
- 111
1
vote
1
answer
3k
views
Host Header Attack -> Password Reset Poisoning -> ASP.NET Web API 2 hosted as Azure App Services
I'm currently testing a site where the host header is used for creating a recovery email link. However, when I try to manipulate the host header in Burp I get an HTTP 400 message saying I'm using an ...
- 747
1
vote
0
answers
383
views
Burpsuite proxy on the same network
Scenario: A test server has a deployed build on there ready for testing, can i use burpsuite/ZAP on my local computer if the server is on the same network? Am i somehow skewing the results and the ...
- 131
1
vote
0
answers
159
views
No fields captured in BurpSuite
I am using burpsuite to bruteforce my routers login form, but I have encountered an issue...
When I enter something into the password field, BurpSuite shows the request, but not what was entered. For ...
- 121
1
vote
0
answers
919
views
custom payload list in xssValidar and burp suite limited to 32
I use the intruder extension xssValidator in burp suite pro to test for XSS vulnerabilities.
My problem is that when I set my payloads list in the xssValidator tab, just the first 32 lines will be ...
- 367
1
vote
0
answers
7k
views
SQLMAP - POST JSON data as body
Hi I'm trying to do a SQL injection in a login form.
With BurpSuite I intercept the request:
POST /xxxx/web/Login HTTP/1.1
Host: 10.0.0.70:42020
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10....
- 111
1
vote
0
answers
879
views
Attacking XAMPP Server with Burp Suite. How do I find victim's IP Address?
I am doing an online course on web penetration testing where the instructor tells us to install Kali Linux on one virtual machine (the attacker), and any other OS (I chose Manjaro Linux) on another ...
- 11
1
vote
0
answers
582
views
How to use SQLMap/Burp to perform SQL injection on a form that is behind another form
I have a form that takes in an IP address and loads that page (Acts as a Web Application Proxy). The page that gets loaded has an SQL injection vulnerability. How can I use SQLMap or BURP to exploit ...
- 173
1
vote
0
answers
530
views
Use Burp to fuzzy test the hash value (the values after the # in the URL)
I know its possible to use a tool like Burp to test Cookie/post/get values , but is it possible to use such tool to perform a brute force/dictionary attack (fuzzy test) on the values after # symbol.
...
- 177
1
vote
0
answers
531
views
How to start server for SQLiPy manually as well as in burp?
I have recently started using Burp and came across SQLiPy and I am stuck how to use it.
python sqlmapapi.py -s -H <ip> -p <port>
Can you please guide me what needs to be entered in the ...
- 153
1
vote
0
answers
327
views
Parsing/processing Burpsuite Intruder responses automatically?
So, testing some command injection fuzzing in Burp using Intruder, and each of the responses generated are around 10k with 99.5% of them being identical between each request.
Is there a way to ...
- 11
1
vote
0
answers
1k
views
how to redirect http request to burp proxy with a dns server like dnschef?
I was wondering how an attacker could "own" my network if he got access to my router administration page. I have setup my router dns option to point to my kali-linux box with the dns proxy "dnschef" ...
- 11
0
votes
0
answers
72
views
CVE-2021-22123 fortiweb bypass?
As a cybersecurity enthusiast, I tried to do the following exercise :
A Fortiweb-VM Version 6.3.11 linked to a DVWA (vulnerable platform), with a burp, I took a request of the Fortiweb platform and ...
0
votes
0
answers
47
views
How to combine multiple HTTP requests into one on burp suite?
How do I combine multiple HTTP requests into one on burp suite? I am trying to do this in Burp Intruder in a way that each request is detected as a separate request but I send it all in one request ...
- 261
0
votes
0
answers
56
views
Does Burp Suite affect my request directly?
When I try to bypass the security configuration of Natas13 (http://natas13.natas.labs.overthewire.org/ A/P:natas13/lW3jYRI02ZKDBb8VtQBU1f6eDRo6WEj9) while using Burp Suite Community Edition on ...
0
votes
0
answers
344
views
CVE 2022-21661 - WP Injection replication
I'm trying to replicate the vulnerability CVE 2022-21661 on my own website that is resulted vulnerable as according the versions involved, as according wp-scan.
I'm trying to submit a POST request ...
- 1
0
votes
0
answers
258
views
How to intercept traffic between two Docker containers
I'm trying to test a man-in-the-middle attack between two Docker containers.
The local virtual machine has two containers with the same bridging network, I 'm trying to use burpsuite to intercept ...
- 1
0
votes
1
answer
523
views
XSS against jQuery PortSwigger challenge
I am trying to do this jQuery XSS challenge here by PortSwigger.
They have a good walkthrough for XSS attacks, however I could not find anything on jQuery, which is also a programming language I have ...
- 181
0
votes
0
answers
95
views
cmd.jsp - Tomcat - Understanding HTTP Status Code (302)
I'm currently playing with cmd.jsp webshells on a Java webapp in tomcat.
This is the request (sending via burpsuite)
PUT /path/cmd.jsp HTTP/1.1
Host: 69.69.69.69
Content-Length: 579
<%@ page ...
0
votes
0
answers
164
views
How to perform php post request attack with javascript sanitization?
The following code demonstrates the source code of this challenge and basically, I need to send a post request with arbitrary code to execute on the server. However, after multiple attempts Im unable ...
- 9
0
votes
0
answers
811
views
How some mobile apps prevent http traffic from being intercepted through a proxy like BurpSuite?
I noticed more and more times that some mobile apps are able to block requests, and they don't forward those requests to the server if they're going to be intercepted with a proxy like BurpSuite. This ...
- 154
0
votes
0
answers
550
views
Burp Suite does not intercept packages from my Firefox
I configured Burp Suite in my virtual Kali Linux on VMware and activated FoxyProxy in Firefox (again in Kali/VMware). However it does not intercept anything, rather websites are blocked with the below ...
