Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
1
vote
0answers
1k views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
3
votes
0answers
237 views

Pentest website available through per app VPN

I am trying to intercept web traffic with burp from mobile devices (Android and iPhone) that are enrolled in an MDM solution (MobileIron). There is one specific website I want to proxy, that is ...
1
vote
0answers
434 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
2
votes
1answer
393 views

DAST Output in Burp and Understanding It

I have recently upgraded to the newest version of Burp which includes the new DAST tools. I am receiving reports from the tool that it has found DOM-Based Javascript Injection, but I am having ...
1
vote
2answers
1k views

POST Method Anti-CSRF Help With Burp Suite

I am testing a web application and encountering anti-CSRF tokens within forms which is hampering fuzzing attempts using Burp Suite intruder. An anti-CSRF token appears as csrf-token within a HTML meta ...
2
votes
1answer
186 views

Burp not intercepting the intended traffic

I'm trying to test an authentication process using NFC reader as a medium. The scenario is like this, I need to go to a certain website but in order to get there, I need to verify myself using my ID ...
0
votes
2answers
280 views

XSS vulnerability through burp suite

I am getting a XSS vulnerability through burp suite but when I inject script manually I don't get the XSS vulnerability. Is this a reportable vulnerability?
3
votes
1answer
174 views

Is there a way to find out what information website queries about us? [closed]

What tool or software should I look for to find out what "fingerprinting" data a website is tracking? Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
2
votes
2answers
2k views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
1
vote
3answers
17k views

SQL Injection on POST JSON request

I have a web application vulnerable to SQL injections. I'm using BurpSuite to intercept the requests. More specifically, the data variable below is vulnerable. I added my own data to aggregates and ...
1
vote
2answers
2k views

Specifying Burp Memory

I am new to Burp Suite. While reading Burp Suite Essentials by Akash Mahajan, I came across one topic on Specifying the maximum memory Burp is allowed to use. It asks readers to allocate 2GB of spare ...
0
votes
2answers
3k views

How to prevent Insecure Direct Object References?

I've just gone through the video that presents "A4 Test Insecure DOR Change Secret" and even though I fully understand what the problem is, I don't know how to mitigate it. Can anyone give me an idea ...
3
votes
1answer
4k views

Optimal way to capture HTTP(S) traffic on proxy-unaware iOS applications

I am trying to capture HTTP(S) traffic from a proxy-unaware Xamarin iOS application. The current tools I have available is a Mac with a Linux Mint VM, Xcode and iOS developer tools, Burp Suite ...
1
vote
3answers
2k views

DVWA: "Hacking attempt detected..."

Hello and good evening, i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA. For the moment, i am learning the ...
0
votes
1answer
391 views

Modifying requests using Burpsuite considered to be valid security vulnerability?

I would like to know if intercepting and modifying requests using Burpsuite before reaching server is considered as vulnerability. In our web based and mobile applications, adequate security measures ...
1
vote
0answers
155 views

How I can use perl + burp? [closed]

How can I use [any]-perl script for pentesting (for example: script for subdomains enumeration)? How to redirect output from a perl-script to burp? This is possible? How can this architecture be ...
2
votes
0answers
2k views

Using burp suite, how can I intercept traffic from one localhost port, but not another one

I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
6
votes
4answers
13k views

Burpsuite: just passthrough firefox detect portal

When I enable Burpsuite's Proxy I continiously get http GET requests for firefox's detectportal as seen in the following image: How I can configure it to somehow just pass though theese requests ...
2
votes
1answer
1k views

iOS traffic not shown in proxy when SSL pinning enabled

I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
0
votes
1answer
132 views

Why are some cookies/data changes (e.g. via Burp) persistent and some are not?

I am not a developer, so please forgive my ignorance. Can someone explain why some cookies can be manipulated and submitted via Burpsuite proxy and some cannot? Is there something in JS (or whatever ...
3
votes
1answer
737 views

Burp suite interception bypass

I am trying to intercept application layer traffic using network level attacks. In particular, I have stumbled across this interesting article here. Link Briefly, it uses ARP poisoning to make ...
3
votes
1answer
24k views

Can't Download Burp's CA Certificate from http://burp [closed]

I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
1
vote
0answers
2k views

Burp suite "Unrecognized SSL message, plaintext connection?" error

While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying: Unrecognized SSL message, plaintext connection? I have the certificate installed on ...
2
votes
1answer
130 views

Decoding requests from potentially malicious Android app

I have recently been doing some security evaluation work on our Android applications, by proxying all the communication through Burp Suite. I noticed one of our devices was sending requests to a ...
3
votes
0answers
2k views

how to fix Out-of-band resource load (HTTP) issue identified by BURP scan

I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0). BURP Scan has identified one issue in my web application. Issue is something like ...
1
vote
0answers
4k views

Failed to connect to www.google.co.in:443 error in burp suite?

I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
3
votes
2answers
2k views

Reflected XSS only works through Burp Repeater because of URL encoding

I am able to get reflected XSS through burp repeater using a GET request. I then click on show response in browser and I am able to get an XSS alert. But when I manually go to the URL in my browser ...
1
vote
1answer
265 views

Why request and response calls in my burp suite python plugin come in such random order?

So I am trying to write this burp plugin using jython and python for burp suite. Now in the processHttpMessage body, I found before a proper execution of the entire method takes place for one request ...
1
vote
2answers
2k views

Using burp-rest-api, how do I log into my web application in order to scan for vulnerabilities?

I am using the VMWare-developed Burp API (https://github.com/vmware/burp-rest-api) in order to try to automate web application scanning for my application. For an example, if I was attempting to test ...
3
votes
1answer
7k views

How to intercept and replace request URL through Burp Proxy?

I've got a mobile app to test, and the url where requests from mobile app are sent is mapi.example.com, but the company told me that it would be great if I could send all requests to mapitest.example....
4
votes
2answers
2k views

Preventing a Burp and Intercept

I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
4
votes
3answers
2k views

Web App Pentesting: When enumerating website directories and files, how to tell if HTTP 200 is a valid page, or a failure page?

Suppose a web app is being tested where all the functionality is behind a login. One of the tests to be run is to check whether any of the pages are available without log-in. We try the actual url ...
0
votes
1answer
7k views

Check for insecure CORS settings with cURL

I'm trying to verify the CORS settings of a website using cURL. The following command should let me check whether the CORS settings can be considered as secure or if requests may be made across ...
0
votes
1answer
1k views

Intercepting with Burp does not work - alternative ways

When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
0
votes
2answers
5k views

Chrome and Firefox showing errors even after importing latest CA certificate for Burp Suite

I am using Chrome 61.0.3163.100 and Firefox 39 on Windows 7 32-bit with Burp Suite v1.7. I have imported latest CA certificate for Burp Suite. In spite of which it's not working for sites with HSTS ...
1
vote
2answers
854 views

Pentesting web applications with unique strings in URL

I would like to get your thoughts/inputs on what approach one can adopt in order to perform penetration testing on a web application which has unique strings appended in every HTTP request. Every ...
0
votes
1answer
3k views

Host Header Attack -> Password Reset Poisoning -> ASP.NET Web API 2 hosted as Azure App Services

I'm currently testing a site where the host header is used for creating a recovery email link. However, when I try to manipulate the host header in Burp I get an HTTP 400 message saying I'm using an ...
4
votes
1answer
3k views

How to use Burp macros to pass parameters to intruder

My issue is that I am attempting to fuzz a 2 stage login for a custom webapp. What I need to do is GET for the initial page which will provide me with an anti-csrf token and a sessionID. From there ...
0
votes
1answer
761 views

How to configure Burp Suite if system proxy is handled by websense and application can only be accessed through IE?

I need to capture a traffic of the application that is compatible only for IE browser, and the proxy server is handled by websense. Thus, system proxy can't be set. Is it possible through Upstream ...
0
votes
1answer
493 views

WAFDetect Extension of Burpsuite

I am creating a list of tools for waf fingerprinting. I have installed waf-detect plugin from bapp store in burpsuite. This plugin runs in the background and create passive scanner issues when WAF ...
1
vote
0answers
333 views

Burpsuite proxy on the same network

Scenario: A test server has a deployed build on there ready for testing, can i use burpsuite/ZAP on my local computer if the server is on the same network? Am i somehow skewing the results and the ...
2
votes
1answer
1k views

Auto urlencode burp scanner requests

Almost all of my XSS false positives come from Burp sending raw byte array payloads to the server and getting the same response injected into DOM or whatever. But in real world browsers automatically ...
1
vote
2answers
227 views

Is it common to be audited for security, but not be given access to the audit results?

When does it make sense, or is it common to not be given access to security audit resuts/reports when dealing with large companies who use your software? How can a case be made for the benefits of ...
2
votes
1answer
563 views

Configuration of Burpsuite (Forwarding request)

I am unable to configure burp suite through proxy 127.0.0.1:8080 with browser proxy (127.0.0.1:8080). Everytime when I run Burpsuite and forward the request (while intercept is On), nothing happens ...
2
votes
3answers
3k views

What does the POST data of HackBar (Firefox add-on) do?

What does the POST DATA Feature of Hackbar (Addon of Firefox )do ? If I am checking for XML XXE vulnerability i use it .But what does it do by POSTing some data ? If I want to repeat the same thing ...
3
votes
1answer
12k views

Proxying MetaSploit through BurpSuite

I was wondering how I would be able to proxy MetaSploit through BurpSuite. I was to reverse engineer a packet being sent to my ChromeCast, but I have no way of viewing the packet. Thanks.
3
votes
1answer
4k views

Password shows as plaintext via burp suite interception for HTTPS request, is it an issue?

While intercepting HTTPS using Burp and Burp's certificate is added to the browser, I intercepted a login request and the password shows as plaintext. Does this indicate a vulnerability or is it the ...
2
votes
2answers
3k views

Burp+Genymotion: Not all traffic from app in Emulator proxied through Burp

I've set up Burp+Genymotion like this: https://linuxsuperuser.com/configure-burp-suite-proxy-genymotion/ to do some penetration testing on Android apps for work. The Genymotion (Android 6.0.0, API 23)...
1
vote
2answers
4k views

Configure Firefox the use Burp proxy

I am very new to Kali, and pen testing, so please correct my terminology if it is off I have configured the proxy for the firefox browser on the kali linux server to use 127.0.0.1:8080 following the ...
0
votes
1answer
454 views

Burp suite doesn't send accept-encoding header

When I send a GET request with Burp, it doesn't have "Accept-Encoding" header on it's header. Because of that, I can't get a js file from a website (It returns 406 response). But when I add "Accept-...