Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
27 votes
3 answers
5k views

Passwords in plaintext?

I'm doing some research on the App of my telephone operator. I started Burp Suite on my Mac in proxy mode, then I opened up the App on my iPhone and started to sniff some traffic. I pressed the "...
marcomanzoni's user avatar
21 votes
7 answers
77k views

How to configure Burp Suite for localhost application

I am trying to analyze HTTP traffic of our application. Application uses port 8080. So I had configured burp proxy for 6666 and upstream proxy to our organisation proxy. Made changes to browser's ...
Dheeraj Joshi's user avatar
20 votes
5 answers
5k views

Where can I find a solid BURP tutorial? [closed]

I'm looking for a good resource for learning/configuring BURP. I understand the concepts behind using the framework, and have read the docs on the site, but if anyone has a solid tutorial link I ...
mrnap's user avatar
  • 1,308
17 votes
7 answers
21k views

Affordable web application attack tools

I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of $...
Peleus's user avatar
  • 3,897
14 votes
2 answers
16k views

What are the differences between Burp and OWASP ZAP?

I am new to security testing and I'm confused about two web proxy tools, namely Burp and OWASP ZAP. Both seem to fulfill the same task, so what exactly are the differences between them?
Nitin Rastogi's user avatar
12 votes
1 answer
9k views

In what situations can element.setAttribute allow XSS?

Burp has identified a potential DOM XSS vulnerability: The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.href and passed to the 'setAttribute()' ...
paj28's user avatar
  • 33.4k
11 votes
1 answer
3k views

Burpsuite accidental defacement, should I be concerned?

I was spidering a website with Burpsuite and the automated Form Submission caused me to unknowingly deface the main page with "[email protected]". It took me a decent amount of time to notice ...
QUEX0R's user avatar
  • 113
9 votes
3 answers
2k views

How could the string \";alert('XSS');// be used for XSS?

I was using Burp Suite for some testing and I noticed that they included the following string: \";alert('XSS');// as an attack string for an XSS payload. How could this string be used to execute ...
Abe Miessler's user avatar
  • 8,175
8 votes
2 answers
20k views

Intercepting Android app traffic with Burp

I am trying to understand what do Burp and Android apps do when the traffic is https. I did not install the Burp CA to the phone. Some apps completely refuse to work. They display an error message or ...
b4da's user avatar
  • 710
7 votes
4 answers
17k views

Burpsuite: just passthrough firefox detect portal

When I enable Burpsuite's Proxy I continiously get http GET requests for firefox's detectportal as seen in the following image: How I can configure it to somehow just pass though theese requests ...
Dimitrios Desyllas's user avatar
7 votes
1 answer
39k views

Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1

Previously I have been able to bypass SSL Pinning by using the program JustTrustMe with the Xposed framework for nearly every app. https://github.com/Fuzion24/JustTrustMe However it has started to ...
Ogglas's user avatar
  • 777
6 votes
1 answer
15k views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
voices's user avatar
  • 1,779
6 votes
1 answer
775 views

How exactly does Burp Sequencer calculate the values it derives?

I'm testing a Web application based on SAP for a customer. One of the checks we normally do is to analyse the cookie holding the session token to make sure that it is sufficiently random and you can'...
Marion McCune's user avatar
5 votes
2 answers
19k views

How to configure Burp suite in browsers while my internet connection works behind proxy.?

I could not able to configure burp suite with browsers. If I use manual connection settings in browsers,I could not load any site.Because my company uses proxy. Following Methods I have tried but ...
Arun's user avatar
  • 181
5 votes
1 answer
1k views

How do I verify that my CSRF fix is successful using Burp?

I know I can use the the Generate CSRF PoC feature to test whether I have a CSRF vulnerability but once I mitigate this, how will Burp recognize this fix on the next scan? I need to be able to ...
sproketboy's user avatar
5 votes
1 answer
6k views

Intercept traffic other than port 80 and 443 on burp suite

I am trying to intercept traffic on port 8000. For example my application is running on abc.com:8000. I am unable to intercept this traffic on burp suite. How can I intercept this traffic in Burp?
Airbourne's user avatar
  • 281
5 votes
1 answer
1k views

Burp Suite Active Scanning Wizard options

I have been making use of Burp Suite's active scanning functionality for some of my recent web application assessments and I had some questions about the active scanners ability to remove urls from ...
Bryan's user avatar
  • 61
5 votes
1 answer
712 views

Is it possible to detect if a proxy is intercepting and sniffing or modifying data

I was watching a video on burp suite and proxies which started me thinking. What if someone setup public proxies that anyone could use and also ran a tool like Burp suite to sniff and/or modify data. ...
Jason's user avatar
  • 3,106
5 votes
2 answers
10k views

Some specific website not loading when proxy through Burp

I am conducting web application pentest in which all the traffic will go through BurpSuite. In addition, SOCKS proxy is used so all the requests are sending out from a fix company IP address. However,...
Traveller's user avatar
  • 103
4 votes
2 answers
3k views

How is HSTS handled on subdomains?

I recently audited a website with three hosts: the main site (example.com), and two subdomains (let's call them portal.example.com, and welcome.example.com). According to the response headers, HSTS ...
user83426's user avatar
  • 310
4 votes
3 answers
3k views

Web App Pentesting: When enumerating website directories and files, how to tell if HTTP 200 is a valid page, or a failure page?

Suppose a web app is being tested where all the functionality is behind a login. One of the tests to be run is to check whether any of the pages are available without log-in. We try the actual url ...
pzirkind's user avatar
  • 747
4 votes
1 answer
2k views

Strange response body in burp suite

When I capture HTTP requests and responses with Burp suite, everything works fine except when I want to capture facebook.com responses, I get a strange response body which is in some unreadable format ...
pineappleman's user avatar
  • 2,299
4 votes
1 answer
19k views

Proxying MetaSploit through BurpSuite

I was wondering how I would be able to proxy MetaSploit through BurpSuite. I was to reverse engineer a packet being sent to my ChromeCast, but I have no way of viewing the packet. Thanks.
Python's user avatar
  • 121
4 votes
2 answers
4k views

Mutual TLS and Cert Pinning solving the same problem?

To prevent MITM from my app I will use cert pinning. To prevent having not approved parties communicate to my server I can use Mutal TLS, which actually accepting communication from trusted sources. ...
Filipon's user avatar
  • 1,294
4 votes
2 answers
3k views

Preventing a Burp and Intercept

I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
shane's user avatar
  • 143
4 votes
2 answers
3k views

Burp Proxy vs MITM

I have recently started using Burp as a proxy for hunting bugs on websites and I see many submissions where people have intercepted and modified requests/responses to exploit certain logic flaws in ...
Dino's user avatar
  • 51
4 votes
1 answer
2k views

How to perform custom response grep/extract in Burp Intruder?

Burp Intruder supports response grep by regexp, and shows every match in separate column in result table. Is it possible to use custom response processor, written in any language (Python preferred) ...
f1nn's user avatar
  • 143
4 votes
1 answer
1k views

How to run multiple session while scanning application through Burp?

While scanning an application through Burp, I've found that if I use multiple threads, it results to session errors like The requested session id appears to be invalid. You may have more than one Task ...
siddhu619's user avatar
  • 117
4 votes
1 answer
1k views

Burpsuite Pro: CSRF tokens in sequencer

So I'm using Burp to try and estimate the entropy used by tokens to prevent CSRF. Let's say a website has a url in it's site protected by a Token: <a href="http://example.com/mypage.TOKEN=1234"&...
Lucas Kauffman's user avatar
4 votes
1 answer
5k views

How to use Burp macros to pass parameters to intruder

My issue is that I am attempting to fuzz a 2 stage login for a custom webapp. What I need to do is GET for the initial page which will provide me with an anti-csrf token and a sessionID. From there ...
Desblock's user avatar
4 votes
1 answer
419 views

What's the use of an "extra" dynamic declaration in an external DTD blind XXE attack?

I've been studying XXE attacks through Portswigger's Web Security Academy. I stumbled upon a lab Exploiting blind XXE to exfiltrate data using a malicious external DTD. In this lab an attacker has to ...
Shuzheng's user avatar
  • 1,237
4 votes
1 answer
141 views

Android mobile application security testing

I am a newbie to Android application security. I would like to know how to tunnel the Android app traffic to Burp Proxy. I have already set the proxy in the emulator and that is working fine. But the ...
user1289569's user avatar
4 votes
4 answers
16k views

Intercepting AJAX request and response using BURP

I would like to intercept an AJAX request using BURP. I have used BURP for web applications testing before. This, however, appears to be a weird case. I am not certain what am I missing here. The ...
qre0ct's user avatar
  • 1,522
3 votes
2 answers
2k views

Form submissions over HTTPS are not encrypted?

My question is regarding HTTPS form submission. One of our website is using HTTPS, we display the login page to the user via HTTPS protocol. When the form is submitted, if we try to intercept the ...
user37536's user avatar
3 votes
2 answers
4k views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
fwr nr's user avatar
  • 133
3 votes
1 answer
26k views

Can't Download Burp's CA Certificate from http://burp [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
MrEyebr0w5's user avatar
3 votes
2 answers
5k views

How to send 2 or more requests at the same time using Burp Suite?

I want to test some application by sending 2 or more requests at the same time (at the same second or even millisecond) using Burp Suite. By using Intruder or Repeater I can't do that at literally one ...
dokichan's user avatar
  • 157
3 votes
1 answer
10k views

How to intercept and replace request URL through Burp Proxy?

I've got a mobile app to test, and the url where requests from mobile app are sent is mapi.example.com, but the company told me that it would be great if I could send all requests to mapitest.example....
Daniel's user avatar
  • 1,442
3 votes
1 answer
7k views

Password shows as plaintext via burp suite interception for HTTPS request, is it an issue?

While intercepting HTTPS using Burp and Burp's certificate is added to the browser, I intercepted a login request and the password shows as plaintext. Does this indicate a vulnerability or is it the ...
Bug Techies's user avatar
3 votes
3 answers
14k views

Where is the BurpSuite CA HTTPS certificate located?

Following this question -> Why are HTTPS requests blocked by Firefox when using ZAP proxy? I was looking in Burp Suite where I could generate its CA for Firefox. I could not see it. I went to Burp ...
Jason Krs's user avatar
  • 379
3 votes
2 answers
4k views

Reflected XSS only works through Burp Repeater because of URL encoding

I am able to get reflected XSS through burp repeater using a GET request. I then click on show response in browser and I am able to get an XSS alert. But when I manually go to the URL in my browser ...
Humble's user avatar
  • 31
3 votes
1 answer
3k views

Burp Suite - Use \n in repeater

Currently I am trying to fuzz the request I sent to Repeater. However if I put a new line (using Enter key) inside repeater's text window, burp on background really creates a crlf. My goal: Send a ...
Fusion's user avatar
  • 201
3 votes
3 answers
11k views

Can Burp be setup to intercept traffic from client application?

I have a client application installed on my Windows computer and I want to perform a MITM on this application to inspect the traffic. I understand that Burp can do the MITM for web application, but ...
Law's user avatar
  • 131
3 votes
1 answer
944 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
Akshansh Shrivastava's user avatar
3 votes
1 answer
5k views

Optimal way to capture HTTP(S) traffic on proxy-unaware iOS applications

I am trying to capture HTTP(S) traffic from a proxy-unaware Xamarin iOS application. The current tools I have available is a Mac with a Linux Mint VM, Xcode and iOS developer tools, Burp Suite ...
Pan Ziyue's user avatar
  • 171
3 votes
2 answers
5k views

how to scan a web application that uses Captcha

I have a web application I am doing a security assessment on and it uses captcha for both the login and for certain operations inside the app. The interesting thing is that this particular app ...
mcgyver5's user avatar
  • 6,864
3 votes
3 answers
4k views

Using Tor from behind a Proxy (like Burp Suite)

I am interested in exploring a bit of the darknet, and I was wondering about the feasibility of running a Tor exit node from behind a local proxy like Burp Suite so that I could ID the destination ...
BSpiros's user avatar
  • 175
3 votes
1 answer
2k views

How to MiTM insert an iframe using burp or another tool?

So, I am trying to obtain a cookie without the secure flag enabled over HTTPS. After reading about it, I came across an answer: You visit https://secure.example.com/ which drops a cookie on your ...
adbarads's user avatar
  • 129
3 votes
1 answer
22k views

"X-Original-URL" and "X-Rewrite-URL" Related Vulnerabilities

I am going through the Burpsuite Academy Training on Access Control and I came across a section I still don't fully understand. In their reading, they explain: Some application frameworks support ...
Tobin Shields's user avatar
3 votes
2 answers
3k views

Not able to intercept traffic from nike.com login request

I'm using BurpSuite to intercept the HTTP/HTTPS requests sent when logging in on https://www.nike.com/. I'm trying to achieve this with the following step: Opening BurpSuite and Firefox Turning on ...
Fozoro's user avatar
  • 81

1
2 3 4 5 6