Questions tagged [burp-suite]
Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.
260
questions
0
votes
1
answer
2k
views
Unable to intercept android app traffic neither in Burp Suite nor in Network Profiler. Can anyone help?
I need to perform MITM attack on an app which doesn't use HttpURLConnection and OkHttp libraries for network connection.
Analysis :
Configured burp on the devices, able to capture request of Chrome ...
- 1
1
vote
1
answer
2k
views
Prevent bypassing of SSL Pinning in android application
I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an ...
-4
votes
1
answer
345
views
How to configure proxy CA certificate in browser? [closed]
I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
-2
votes
2
answers
881
views
Burp Suite's keeps my ip safe?
I am starting to learn how to use Burp Suite, but since it is kind of (tho I know it does more) automatic way of plugging information into a website/form, should I still use proxychain/vpn to keep my ...
- 1
1
vote
2
answers
1k
views
BurpSuite Brute Force Iteration
I am working on a security assessment for an online application. When testing the pin verification mechanism and possibilities of brute force, I came across a post request that looks like the below
...
- 13
2
votes
2
answers
2k
views
Redirect OWASP ZAP IP:Port to localhost like in Burp
I want to intercept an application. It connects to an IP and port. I have to connect to localhost:443 to make it work (there's a gateway that routes depending on the port).
In Burp I was able to set ...
- 21
0
votes
0
answers
746
views
How to capture non-HTTP or HTTPS URLs in Burp
I want to intercept URLs except for HTTP and HTTPS, is that possible with Burp Suite?
For example, I want to get a response of following URL in Burp Suite:
jar:file:///C:/Program%20Files/Mozilla%...
- 101
2
votes
0
answers
845
views
How apps manage to prevent bypassing SSL pinning using Xposed framework?
We all know how to bypass SSL pinning using Xposed Framework module - SSLUnpinning. But I've found apps which cannot be bypassed this way. How do these apps prevent bypass of the SSL pinning which is ...
- 21
0
votes
2
answers
292
views
How to check if a list of domains contains any WordPress installation?
Does any software or any other way to detect if a website contains any WordPress installation?
For example lets say we have the website example.com which is not a WordPress site, but we have a ...
- 157
2
votes
0
answers
106
views
Burp Suite - Mark Issues as "Validated"
After performing a audit (formerly active and passive scan) of a web app with Burp suite I manually verify and validate the issues it identifies to rule out false positives, see what is possible with ...
1
vote
1
answer
122
views
How to enumerate all drop-down options in an html form using Burp Suit Intruder
In my app there is a form with a <select> element which has several <options> to choose from. I want to get all the responses that correspond to each option available in the form. The best ...
- 13
0
votes
1
answer
2k
views
How to do Mobile application testing using Burp Suite on latest ios and android devices
I am trying to intercept the request with burp suite for mobile application pen testing on iOS and Android devices.
Here are the settings below which I have done in below points.
I made sure that my ...
- 1
0
votes
1
answer
4k
views
How to intercept ntlm authentication based application?
There is an internal application which authenticates based on windows credentials (NTLM Authentication). It is not intercepting while in proxy with Burp Suite and is stuck in login pop-up even after ...
0
votes
0
answers
404
views
Proxying an Android application with Burp Suite
I'd like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates ...
- 123
1
vote
2
answers
2k
views
How do i extract data from response and use it in url for next request in Burp Intruder?
The URL is https://www.example.com/send?session=abcabcabc.
When the above URL is requested, a response comes with <a> tag which contains a new URL with a different session value like https://...
- 13
3
votes
1
answer
663
views
How do I know that the request and response is using encryption protocols in burp suite?
I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
1
vote
1
answer
830
views
HTML payloads work on burp but not on browser
I was looking into bWAPP.
In the HTML GET Injection section, I entered
%25%33%63%25%36%38%25%33%31%25%33%65%25%36%31%25%37%30%25%37%30%25%36%63%25%36%35%25%33%63%25%32%66%25%36%38%25%33%31%25%33%65
...
- 111
0
votes
1
answer
438
views
No Cipher Suite In common
When i'm trying to intercept the mobile traffic using burp suite. Getting this error "No Cipher suite in Common" I tried to add all the available cipher suits in the burp but still getting this error. ...
- 324
1
vote
0
answers
2k
views
Is there a way to replay WebSocket messages? [closed]
Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
- 43
3
votes
0
answers
341
views
Pentest website available through per app VPN
I am trying to intercept web traffic with burp from mobile devices (Android and iPhone) that are enrolled in an MDM solution (MobileIron). There is one specific website I want to proxy, that is ...
- 31
1
vote
0
answers
508
views
Capturing HTTP Traffic Through Proxy Sever
While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
- 951
2
votes
1
answer
497
views
DAST Output in Burp and Understanding It
I have recently upgraded to the newest version of Burp which includes the new DAST tools. I am receiving reports from the tool that it has found DOM-Based Javascript Injection, but I am having ...
- 384
1
vote
2
answers
2k
views
POST Method Anti-CSRF Help With Burp Suite
I am testing a web application and encountering anti-CSRF tokens within forms which is hampering fuzzing attempts using Burp Suite intruder. An anti-CSRF token appears as csrf-token within a HTML meta ...
- 399
2
votes
1
answer
269
views
Burp not intercepting the intended traffic
I'm trying to test an authentication process using NFC reader as a medium. The scenario is like this, I need to go to a certain website but in order to get there, I need to verify myself using my ID ...
- 143
0
votes
2
answers
414
views
XSS vulnerability through burp suite
I am getting a XSS vulnerability through burp suite but when I inject script manually I don't get the XSS vulnerability.
Is this a reportable vulnerability?
3
votes
1
answer
258
views
Is there a way to find out what information website queries about us? [closed]
What tool or software should I look for to find out what "fingerprinting" data
a website is tracking?
Like, I want to know, if website looks for a cache and/or fonts installed in system, or Canval, ...
- 141
2
votes
2
answers
3k
views
How is intercepting my own HTTPS traffic possible?
I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
1
vote
3
answers
23k
views
SQL Injection on POST JSON request
I have a web application vulnerable to SQL injections. I'm using BurpSuite to intercept the requests. More specifically, the data variable below is vulnerable. I added my own data to aggregates and ...
- 19
1
vote
2
answers
3k
views
Specifying Burp Memory
I am new to Burp Suite. While reading Burp Suite Essentials by Akash Mahajan, I came across one topic on Specifying the maximum memory Burp is allowed to use. It asks readers to allocate 2GB of spare ...
0
votes
2
answers
3k
views
How to prevent Insecure Direct Object References?
I've just gone through the video that presents "A4 Test Insecure DOR Change Secret" and even though I fully understand what the problem is, I don't know how to mitigate it. Can anyone give me an idea ...
- 3
3
votes
1
answer
5k
views
Optimal way to capture HTTP(S) traffic on proxy-unaware iOS applications
I am trying to capture HTTP(S) traffic from a proxy-unaware Xamarin iOS application. The current tools I have available is a Mac with a Linux Mint VM, Xcode and iOS developer tools, Burp Suite ...
- 171
1
vote
3
answers
2k
views
DVWA: "Hacking attempt detected..."
Hello and good evening,
i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA.
For the moment, i am learning the ...
- 11
0
votes
1
answer
638
views
Modifying requests using Burpsuite considered to be valid security vulnerability?
I would like to know if intercepting and modifying requests using Burpsuite before reaching server is considered as vulnerability.
In our web based and mobile applications, adequate security measures ...
- 101
1
vote
0
answers
221
views
How I can use perl + burp? [closed]
How can I use [any]-perl script for pentesting (for example: script for subdomains enumeration)?
How to redirect output from a perl-script to burp? This is possible? How can this architecture be ...
- 113
2
votes
0
answers
2k
views
Using burp suite, how can I intercept traffic from one localhost port, but not another one
I have one webapp available on localhost:12345, and another service running on `localhost:6789'. I want to monitor the traffic to/from the webapp (12345), but universally pass the traffic to the ...
- 301
6
votes
4
answers
16k
views
Burpsuite: just passthrough firefox detect portal
When I enable Burpsuite's Proxy I continiously get http GET requests for firefox's detectportal as seen in the following image:
How I can configure it to somehow just pass though theese requests ...
2
votes
2
answers
2k
views
iOS traffic not shown in proxy when SSL pinning enabled
I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
- 1,442
0
votes
1
answer
271
views
Why are some cookies/data changes (e.g. via Burp) persistent and some are not?
I am not a developer, so please forgive my ignorance. Can someone explain why some cookies can be manipulated and submitted via Burpsuite proxy and some cannot? Is there something in JS (or whatever ...
- 740
3
votes
1
answer
1k
views
Burp suite interception bypass
I am trying to intercept application layer traffic using network level attacks. In particular, I have stumbled across this interesting article here.
Link
Briefly, it uses ARP poisoning to make ...
- 113
3
votes
1
answer
25k
views
Can't Download Burp's CA Certificate from http://burp [closed]
I was trying to download burp's CA certificate for Firefox on Kali from http://burp as specified in its documentation but the site is not available. It redirects me to http://www.inert.com/. So is ...
- 33
1
vote
0
answers
3k
views
Burp suite "Unrecognized SSL message, plaintext connection?" error
While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying:
Unrecognized SSL message, plaintext connection?
I have the certificate installed on ...
- 481
2
votes
1
answer
223
views
Decoding requests from potentially malicious Android app
I have recently been doing some security evaluation work on our Android applications, by proxying all the communication through Burp Suite.
I noticed one of our devices was sending requests to a ...
- 4,162
3
votes
0
answers
3k
views
how to fix Out-of-band resource load (HTTP) issue identified by BURP scan
I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0).
BURP Scan has identified one issue in my web application. Issue is something like ...
- 31
1
vote
0
answers
6k
views
Failed to connect to www.google.co.in:443 error in burp suite?
I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
- 111
3
votes
2
answers
3k
views
Reflected XSS only works through Burp Repeater because of URL encoding
I am able to get reflected XSS through burp repeater using a GET request. I then click on show response in browser and I am able to get an XSS alert. But when I manually go to the URL in my browser ...
- 31
1
vote
1
answer
340
views
Why request and response calls in my burp suite python plugin come in such random order?
So I am trying to write this burp plugin using jython and python for burp suite. Now in the processHttpMessage body, I found before a proper execution of the entire method takes place for one request ...
- 57
1
vote
2
answers
2k
views
Using burp-rest-api, how do I log into my web application in order to scan for vulnerabilities?
I am using the VMWare-developed Burp API (https://github.com/vmware/burp-rest-api) in order to try to automate web application scanning for my application. For an example, if I was attempting to test ...
- 11
3
votes
1
answer
8k
views
How to intercept and replace request URL through Burp Proxy?
I've got a mobile app to test, and the url where requests from mobile app are sent is mapi.example.com, but the company told me that it would be great if I could send all requests to mapitest.example....
- 1,442
4
votes
2
answers
2k
views
Preventing a Burp and Intercept
I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
- 43
4
votes
3
answers
2k
views
Web App Pentesting: When enumerating website directories and files, how to tell if HTTP 200 is a valid page, or a failure page?
Suppose a web app is being tested where all the functionality is behind a login.
One of the tests to be run is to check whether any of the pages are available without log-in.
We try the actual url ...
- 727