2022 Developer Survey is open! Take survey.

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
2 votes
3 answers
3k views

What does the POST data of HackBar (Firefox add-on) do?

What does the POST DATA Feature of Hackbar (Addon of Firefox )do ? If I am checking for XML XXE vulnerability i use it .But what does it do by POSTing some data ? If I want to repeat the same thing ...
user avatar
3 votes
1 answer
13k views

Proxying MetaSploit through BurpSuite

I was wondering how I would be able to proxy MetaSploit through BurpSuite. I was to reverse engineer a packet being sent to my ChromeCast, but I have no way of viewing the packet. Thanks.
user avatar
  • 111
3 votes
1 answer
5k views

Password shows as plaintext via burp suite interception for HTTPS request, is it an issue?

While intercepting HTTPS using Burp and Burp's certificate is added to the browser, I intercepted a login request and the password shows as plaintext. Does this indicate a vulnerability or is it the ...
user avatar
2 votes
2 answers
3k views

Burp+Genymotion: Not all traffic from app in Emulator proxied through Burp

I've set up Burp+Genymotion like this: https://linuxsuperuser.com/configure-burp-suite-proxy-genymotion/ to do some penetration testing on Android apps for work. The Genymotion (Android 6.0.0, API 23)...
user avatar
1 vote
2 answers
4k views

Configure Firefox the use Burp proxy

I am very new to Kali, and pen testing, so please correct my terminology if it is off I have configured the proxy for the firefox browser on the kali linux server to use 127.0.0.1:8080 following the ...
user avatar
0 votes
1 answer
538 views

Burp suite doesn't send accept-encoding header

When I send a GET request with Burp, it doesn't have "Accept-Encoding" header on it's header. Because of that, I can't get a js file from a website (It returns 406 response). But when I add "Accept-...
user avatar
1 vote
1 answer
2k views

Burp Suite - Although my configurations are correct, still Chrome doesn't allows me to access HTTPS sites and throws an error!

I'm having a hard time accessing sites with HSTS enabled via burp proxy in Chrome. Everything works perfectly fine with Firefox and IE, but Chrome has stopped working since yesterday. I've followed ...
user avatar
1 vote
0 answers
155 views

No fields captured in BurpSuite

I am using burpsuite to bruteforce my routers login form, but I have encountered an issue... When I enter something into the password field, BurpSuite shows the request, but not what was entered. For ...
user avatar
  • 111
1 vote
0 answers
861 views

custom payload list in xssValidar and burp suite limited to 32

I use the intruder extension xssValidator in burp suite pro to test for XSS vulnerabilities. My problem is that when I set my payloads list in the xssValidator tab, just the first 32 lines will be ...
user avatar
  • 367
2 votes
1 answer
7k views

How do I extract data from response in Burp Suite Intruder?

Already gone through How to perform custom response grep/extract in Burp Intruder?, but this does not solve my problem. While performing attack using Intruder I have used grep extract and obtained ...
user avatar
  • 373
2 votes
0 answers
767 views

HTTP proxy for smart card based SSL

I am trying to pentest a web application, which seems to be using the user's smartcard for building up the SSL tunnel, and by that implementing smartcard authentication. My problem is that I haven't ...
user avatar
  • 59
0 votes
2 answers
821 views

Defending from POST requests from BURP?

On my site, I restrict access to forms through assigning a $_SESSION['id'] if they are logged in. If there is no $_SESSION['id'], to form page will redirect to a login page. But I ran burpsuite on ...
user avatar
  • 23
3 votes
1 answer
9k views

Is is possible to intercept Guest VM traffic on the host machine's Burpsuite

I'm running Kali on Windows 7 via VMWare, and would like to be able to access private network websites, which i can't seem to be able to do. So I tried to forward the system traffic to the host ...
user avatar
3 votes
0 answers
4k views

Intercepting hydra with burp suite

I'm using burp suite as a proxy and when I run hydra, burp suite should be able to catch that and log it in HTTP history, but instead of that I get the error Can not connect [unreachable] I tried ...
user avatar
  • 311
2 votes
1 answer
3k views

Burp with whatsapp

While doing some pentesting on an android app with Burp setup as a proxy (with https) I saw no traffic coming from whatsapp messages that I received or send. I looked around in Burp, but I cannot ...
user avatar
  • 869
3 votes
1 answer
11k views

What is client-channel.google? [closed]

I am newbie in penetration testing. When I was using burp-suite, intercepting a dummy web-application when I found some strange URLs. 7.client-channel.google 10.client-channel.google... etc I ...
user avatar
  • 581
1 vote
2 answers
184 views

Burp CA security risks

I am using Burp as a proxy to test an Android app. To get this to work I installed the Burp CA certificate on my phone. As far as I understand it (and that is not a lot of understanding) I could leave ...
user avatar
  • 869
8 votes
2 answers
20k views

Intercepting Android app traffic with Burp

I am trying to understand what do Burp and Android apps do when the traffic is https. I did not install the Burp CA to the phone. Some apps completely refuse to work. They display an error message or ...
user avatar
  • 670
1 vote
1 answer
503 views

Brute force email in JSON format

I have a parameter args=[490114,{"user_login":"user@example.com","":"","perm":"view","partners":[],"event_labels":[]}] in the HTTP request but in the encoded format. I want to brute force this ...
user avatar
1 vote
1 answer
4k views

Proxying Requests through Python and Burpsuite not working

I have BurpSuite configured as a proxy. I have generated and installed a certificate for Burp in my Mac's keychain. On a Kali box I have also configured Iceweasel to proxy through my Burp Proxy ...
user avatar
  • 216
2 votes
2 answers
989 views

Burp Suite Proxy Doesn't Forward Any Packets [closed]

I'm trying to capture data from my iOS device (specifically a troublesome app) and when I configure it to use my laptop on the same wifi as a proxy, I lose all connectivity. Here's what I did in Burp ...
user avatar
  • 121
1 vote
0 answers
226 views

Sql error at Login Page [closed]

I am testing an application where I am getting this SQL error message: RT_userName :test'; RT_userPassword fg Exceptionjava.sql.SQLException: Invalid SQL statement or JDBC escape, terminating ''' not ...
user avatar
  • 11
5 votes
1 answer
33k views

Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1

Previously I have been able to bypass SSL Pinning by using the program JustTrustMe with the Xposed framework for nearly every app. https://github.com/Fuzion24/JustTrustMe However it has started to ...
user avatar
  • 665
2 votes
2 answers
6k views

vuln Cross-origin resource sharing: arbitrary origin trusted

i have some trouble tO exloit CORS respons form burp The application allowed access from the requested origin https://xrmtfgxgjkzw.com request GET wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww....
user avatar
  • 41
3 votes
3 answers
13k views

Where is the BurpSuite CA HTTPS certificate located?

Following this question -> Why are HTTPS requests blocked by Firefox when using ZAP proxy? I was looking in Burp Suite where I could generate its CA for Firefox. I could not see it. I went to Burp ...
user avatar
  • 349
0 votes
1 answer
774 views

Setting payload for email using burp intruder [closed]

I am setting up the burp intruder attack for email. For example, youremail@gmail.com Now when i added $ it takes youremail@gmail%2ecom so i am getting the result as email is invalid type. My aim is ...
user avatar
0 votes
2 answers
641 views

If I install Burp certificate in my system and try to access HSTS certified site and site will work and is it safe?

Can I intercept request via burp suite CA certificate for HSTS sites and is it safe or not?
user avatar
1 vote
1 answer
416 views

GWT - using burp suite for injecting xss payloads

I build a small website for penetration testing purposes using the Google Webtool Kit framework. However I was able to make the application vulnerable against xss by using following code: final ...
user avatar
1 vote
2 answers
1k views

using the CO2-Extension within Burp for sql injection

I am using the free version of Burp Suite and the CO2-Extension for sql injection attacks. Using the extension offers you two possible attacking ways: Either you copy the command which is ...
user avatar
4 votes
1 answer
115 views

Android mobile application security testing

I am a newbie to Android application security. I would like to know how to tunnel the Android app traffic to Burp Proxy. I have already set the proxy in the emulator and that is working fine. But the ...
user avatar
1 vote
0 answers
6k views

SQLMAP - POST JSON data as body

Hi I'm trying to do a SQL injection in a login form. With BurpSuite I intercept the request: POST /xxxx/web/Login HTTP/1.1 Host: 10.0.0.70:42020 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10....
user avatar
  • 111
1 vote
0 answers
814 views

Attacking XAMPP Server with Burp Suite. How do I find victim's IP Address?

I am doing an online course on web penetration testing where the instructor tells us to install Kali Linux on one virtual machine (the attacker), and any other OS (I chose Manjaro Linux) on another ...
user avatar
  • 11
1 vote
1 answer
208 views

How do I get a count of unique nested URLs in an web application?

I'm scoping a web application for a pentest. The application has a number of dynamic nested URLs. I've crawled through all the URLs in the application via Burp-suite. I need to obtain a list of ...
user avatar
18 votes
7 answers
58k views

How to configure Burp Suite for localhost application

I am trying to analyze HTTP traffic of our application. Application uses port 8080. So I had configured burp proxy for 6666 and upstream proxy to our organisation proxy. Made changes to browser's ...
user avatar
1 vote
0 answers
568 views

How to use SQLMap/Burp to perform SQL injection on a form that is behind another form

I have a form that takes in an IP address and loads that page (Acts as a Web Application Proxy). The page that gets loaded has an SQL injection vulnerability. How can I use SQLMap or BURP to exploit ...
user avatar
1 vote
0 answers
453 views

Use Burp to fuzzy test the hash value (the values after the # in the URL)

I know its possible to use a tool like Burp to test Cookie/post/get values , but is it possible to use such tool to perform a brute force/dictionary attack (fuzzy test) on the values after # symbol. ...
user avatar
  • 177
1 vote
0 answers
455 views

Unable to use xssValidator on Burpsuite [closed]

I am trying to use the xssValidator extension on Burp using this tutorial: https://www.youtube.com/watch?v=qS5PsxYY1uc . I have installed xssValidator by going to the burp store under Extender tab-> ...
user avatar
11 votes
1 answer
6k views

In what situations can element.setAttribute allow XSS?

Burp has identified a potential DOM XSS vulnerability: The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.href and passed to the 'setAttribute()' ...
user avatar
  • 32.6k
2 votes
0 answers
328 views

Burpsuite - CSRF Token Macro

I implemented a website using the vaadin-framework. When I send a request to my server, there is some data in my POST-Request which looks like: {"csrfToken":"3df2f528-15c7-434c-8505-539be1c44157","...
user avatar
0 votes
1 answer
855 views

Burpsuite - finding xss vulnerabilities in the vaadin framework

I made a little website using the vaadin-framework. It contains one TextField-component for user input and one Label-component which is placed in another view and which is displaying exactly the value,...
user avatar
4 votes
1 answer
1k views

How to perform custom response grep/extract in Burp Intruder?

Burp Intruder supports response grep by regexp, and shows every match in separate column in result table. Is it possible to use custom response processor, written in any language (Python preferred) ...
user avatar
  • 143
2 votes
0 answers
265 views

Is it possible to use Burp to show hidden AngularJS elements, that are hidden using "ngHide"?

I’m performing an audit of an AngularJS application that uses Angular's ngShow and ngHide to show and hide elements on a page. Is it possible to use Burp Proxy, Burp Macros, or another tool to ...
user avatar
  • 21
4 votes
1 answer
2k views

Strange response body in burp suite

When I capture HTTP requests and responses with Burp suite, everything works fine except when I want to capture facebook.com responses, I get a strange response body which is in some unreadable format ...
user avatar
  • 2,249
1 vote
2 answers
1k views

Getting payload in burp intruder dynamically from the website

For the purpose of my thesis, I need to find the user name/password combination on a given website. I have tried to achieve that using Hydra but failed miserably due to a hidden form value, which ...
user avatar
1 vote
0 answers
457 views

How to start server for SQLiPy manually as well as in burp?

I have recently started using Burp and came across SQLiPy and I am stuck how to use it. python sqlmapapi.py -s -H <ip> -p <port> Can you please guide me what needs to be entered in the ...
user avatar
1 vote
1 answer
2k views

Nmap through Burp ¿?

I know nmap and burp work at different levels, but in the same way, metasploit allows to set either an http or socks4 proxy, and I know and have used proxychains with Burp also. But what I want is to ...
user avatar
  • 273
4 votes
1 answer
5k views

Intercept traffic other than port 80 and 443 on burp suite

I am trying to intercept traffic on port 8000. For example my application is running on abc.com:8000. I am unable to intercept this traffic on burp suite. How can I intercept this traffic in Burp?
user avatar
  • 271
5 votes
1 answer
510 views

Is it possible to detect if a proxy is intercepting and sniffing or modifying data

I was watching a video on burp suite and proxies which started me thinking. What if someone setup public proxies that anyone could use and also ran a tool like Burp suite to sniff and/or modify data. ...
user avatar
  • 3,086
1 vote
1 answer
748 views

SQLMap, SQLiPy and connection

I can successfully perform a sqlmap scan of my target from a host. However, if I run sqlmapapi from that same host and use SQLiPy from Burp, sqlmapapi returns connection errors. The specific SQLiPy ...
user avatar
5 votes
1 answer
11k views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
user avatar
  • 1,649