Skip to main content

Questions tagged [burp-suite]

Burp Suite is a popular platform for performing security testing of web applications. It can also be used by a malicious party to analyze and attack web applications. Implemented in Java.

Filter by
Sorted by
Tagged with
1 vote
1 answer
611 views

Burp DOM-based Open Redirect

When I sent a request such as: GET /500.aspx?aspxerrorpath=/error.aspx HTTP/1.1 Host: test.com Burp reports "The application may be vulnerable to DOM-based open redirection: Data is read from ...
TSFH's user avatar
  • 13
1 vote
0 answers
161 views

How can I manipulate certain server side responses? Specifically Ajax Responses? XXE Attack? Hybrid DNS Resolution?

I would like to be able to switch back and forth between the real DNS and maybe setting a local DNS entry so I can manipulate AJAX responses for code security checks. For instance if the server ...
Neo's user avatar
  • 141
1 vote
0 answers
403 views

How to reproduce following POC of dom based open redirection Vulnerability Flagged by burp suite scan

During scan, the burp suite flagged DOM open redirection vulnerability with the following POC. How can I reproduce it? Data is read from document.referrer and passed to xhr.send. The following value ...
Deathpoolxrs's user avatar
1 vote
0 answers
876 views

Changing referer value in burp request has no impact on the response

I am testing a request/response of an application using the burp suite and found that changing the Referer value has no effect on the response. The Referer contains the URL along with the unique ID of ...
Supraja's user avatar
  • 23
1 vote
2 answers
888 views

XSS against jQuery PortSwigger challenge

I am trying to do this jQuery XSS challenge here by PortSwigger. They have a good walkthrough for XSS attacks, however I could not find anything on jQuery, which is also a programming language I have ...
questioner's user avatar
1 vote
0 answers
603 views

Invalid Target in Intruder

starting with Burp Suite and trying to breach DVWA, I am bugged with this error: "Invalid Target". Damn Vulnerable Web App is actually hosted on the private net as Burp shows: Where am I ...
Jishan's user avatar
  • 203
1 vote
0 answers
414 views

Needing help intercepting local SSL traffic on a difficult Android app

I'm trying to intercept traffic from an Andriod app. I've forwarded ports 80, 443, 6699 and 6698 on Kali to a listener port and set up arp-spoofing. I'm using BurpSuite on the same computer to listen ...
Doby's user avatar
  • 11
1 vote
0 answers
143 views

call http-webpage in local browser, where the webserver is only reachable through proxychains (as it sits in a different network)

I have the following proxychains.conf [...] [ProxyList] # add proxy here ... # meanwile # defaults set to "tor" #socks4 127.0.0.1 9050 # <ip_prox_1> http 10.10.10.100 3128 # ...
user3469811's user avatar
1 vote
0 answers
201 views

Is there any way to fuzz a HTTP response field via Burp Intruder?

I found a privilege escalation bug in an HTTP response page and I want to fuzz one of the field with ID values that define the admin role and see if any other viable ID comes up. Is there a way to do ...
user250419's user avatar
1 vote
0 answers
371 views

Decoding burp XSS DNS resolution payload

I'm testing burp against a vulnerable application as part of work for my client. There was one successful xss payload related to DNS lookup which worked on form data at point of file-upload. Here is ...
user316389's user avatar
1 vote
0 answers
1k views

Open redirection (DOM-based) on ASP.NET 4.7 Web Forms

A scan with Burp Suite has reported a possible vulnerability on all the pages of my application, which is based on ASP.NET 4.7 WebForms. the issue is: The application may be vulnerable to DOM-based ...
Giox's user avatar
  • 121
1 vote
1 answer
3k views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
Nicholas Obert's user avatar
1 vote
0 answers
160 views

Track HTTP(S) Network calls being made by an Android Device

I am planning to track the Network calls being made by apps and the website of an Android Device. I have used the Burp Suite tool for tracking the network calls. Until now the Android Device and the ...
Rajesh K's user avatar
  • 111
1 vote
0 answers
2k views

Burp: Out Of band resource load

I scanned a web app using Burp and it reported this vulnerability. When I click on the issue it show this request and response: Request: GET / HTTP/1.1 Host: xxxxx.burpcollaborator.net Pragma: no-...
b4da's user avatar
  • 710
1 vote
0 answers
228 views

Configure Burp to pass dynamic authentication token from the past response to the next request in intruder

I would like to reuse an authentication token (which is dynamic) between a response and a request in Burp Suite intruder. By dynamic I mean that the token is invalidated after being sent to the ...
James's user avatar
  • 11
1 vote
0 answers
2k views

Is there a way to replay WebSocket messages? [closed]

Burp Suite can intercept WebSocket messages ("WebSockets history" under "Proxy" tab) but does not seem to be able to resend (at least not yet, according to this). I was wondering what techniques or ...
PFrancisco's user avatar
1 vote
0 answers
579 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
Shiv Sahni's user avatar
1 vote
0 answers
269 views

How I can use perl + burp? [closed]

How can I use [any]-perl script for pentesting (for example: script for subdomains enumeration)? How to redirect output from a perl-script to burp? This is possible? How can this architecture be ...
69 420 1970's user avatar
1 vote
0 answers
5k views

Burp suite "Unrecognized SSL message, plaintext connection?" error

While running burp suite as an intercept proxy on a users computer, I am getting an error in the burp log saying: Unrecognized SSL message, plaintext connection? I have the certificate installed on ...
CertifcateJunky's user avatar
1 vote
0 answers
7k views

Failed to connect to www.google.co.in:443 error in burp suite?

I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
Arun Kumar's user avatar
1 vote
0 answers
193 views

No fields captured in BurpSuite

I am using burpsuite to bruteforce my routers login form, but I have encountered an issue... When I enter something into the password field, BurpSuite shows the request, but not what was entered. For ...
Python's user avatar
  • 121
1 vote
0 answers
993 views

custom payload list in xssValidar and burp suite limited to 32

I use the intruder extension xssValidator in burp suite pro to test for XSS vulnerabilities. My problem is that when I set my payloads list in the xssValidator tab, just the first 32 lines will be ...
Reda LM's user avatar
  • 367
1 vote
1 answer
639 views

Brute force email in JSON format

I have a parameter args=[490114,{"user_login":"[email protected]","":"","perm":"view","partners":[],"event_labels":[]}] in the HTTP request but in the encoded format. I want to brute force this ...
Mohamed Osama's user avatar
1 vote
0 answers
254 views

Sql error at Login Page [closed]

I am testing an application where I am getting this SQL error message: RT_userName :test'; RT_userPassword fg Exceptionjava.sql.SQLException: Invalid SQL statement or JDBC escape, terminating ''' not ...
Harry's user avatar
  • 11
1 vote
0 answers
7k views

SQLMAP - POST JSON data as body

Hi I'm trying to do a SQL injection in a login form. With BurpSuite I intercept the request: POST /xxxx/web/Login HTTP/1.1 Host: 10.0.0.70:42020 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10....
ronIDX's user avatar
  • 111
1 vote
0 answers
974 views

Attacking XAMPP Server with Burp Suite. How do I find victim's IP Address?

I am doing an online course on web penetration testing where the instructor tells us to install Kali Linux on one virtual machine (the attacker), and any other OS (I chose Manjaro Linux) on another ...
mdemont's user avatar
  • 11
1 vote
0 answers
653 views

How to use SQLMap/Burp to perform SQL injection on a form that is behind another form

I have a form that takes in an IP address and loads that page (Acts as a Web Application Proxy). The page that gets loaded has an SQL injection vulnerability. How can I use SQLMap or BURP to exploit ...
user1004985's user avatar
1 vote
0 answers
641 views

Use Burp to fuzzy test the hash value (the values after the # in the URL)

I know its possible to use a tool like Burp to test Cookie/post/get values , but is it possible to use such tool to perform a brute force/dictionary attack (fuzzy test) on the values after # symbol. ...
picolo's user avatar
  • 177
1 vote
0 answers
495 views

Unable to use xssValidator on Burpsuite [closed]

I am trying to use the xssValidator extension on Burp using this tutorial: https://www.youtube.com/watch?v=qS5PsxYY1uc . I have installed xssValidator by going to the burp store under Extender tab-> ...
user5781826's user avatar
1 vote
0 answers
590 views

How to start server for SQLiPy manually as well as in burp?

I have recently started using Burp and came across SQLiPy and I am stuck how to use it. python sqlmapapi.py -s -H <ip> -p <port> Can you please guide me what needs to be entered in the ...
ChallengeMe's user avatar
1 vote
1 answer
3k views

Nmap through Burp ¿?

I know nmap and burp work at different levels, but in the same way, metasploit allows to set either an http or socks4 proxy, and I know and have used proxychains with Burp also. But what I want is to ...
aDoN's user avatar
  • 293
1 vote
0 answers
368 views

Parsing/processing Burpsuite Intruder responses automatically?

So, testing some command injection fuzzing in Burp using Intruder, and each of the responses generated are around 10k with 99.5% of them being identical between each request. Is there a way to ...
Kai5hu's user avatar
  • 11
1 vote
0 answers
1k views

how to redirect http request to burp proxy with a dns server like dnschef?

I was wondering how an attacker could "own" my network if he got access to my router administration page. I have setup my router dns option to point to my kali-linux box with the dns proxy "dnschef" ...
Jean-Yann's user avatar
0 votes
4 answers
431 views

Software for web hacking? [closed]

I want to learn sql injection, xss and other web attacks. I am new to all this, just a beginner. I want to know which software to use. Can I use Windows for these attacks ...
kishan keswani's user avatar
0 votes
1 answer
2k views

BurpSuite: Anonymity

Are the attacks being performed using burpsuite detectable? If yes, how should we stay anonymous/secure while conducting web application reconnaissance?
Asak's user avatar
  • 111
0 votes
1 answer
255 views

Capturing data from a Change Password form

Through ZAP, I was able to capture the following from a Change Password form: GET /rest/user/change-password?current=P@ssword&new=password123 &repeat=password123 HTTP/1.1 Host: localhost:3000 ...
t5j's user avatar
  • 49
0 votes
2 answers
533 views

XSS vulnerability through burp suite

I am getting a XSS vulnerability through burp suite but when I inject script manually I don't get the XSS vulnerability. Is this a reportable vulnerability?
Dhananjay's user avatar
0 votes
1 answer
8k views

Check for insecure CORS settings with cURL

I'm trying to verify the CORS settings of a website using cURL. The following command should let me check whether the CORS settings can be considered as secure or if requests may be made across ...
SaAtomic's user avatar
  • 1,019
0 votes
2 answers
868 views

How do google or facebook know I'm behind a man in the middle proxy?

Whenever I'm behind a man in the middle proxy such as burp, and try to access either google or facebook, I get an alert message telling me that the connection is not reliable and blocks the page from ...
helloworld's user avatar
0 votes
1 answer
742 views

How long would this take to bruteforce?

I am working on the following war game from Defend The Web, which requires me to do a source code review to login as the user memtash. The code is on GitLab here. Having inspected the source code ...
user5623335's user avatar
0 votes
1 answer
2k views

How to use custom HTTP headers with nmap?

I am trying a bbp program, and they allow requests only with some custom headers. So I was wondering if it is possible to add custom headers to nmap requests. Things I tried: I tried using burp proxy. ...
Monu's user avatar
  • 227
0 votes
2 answers
4k views

How to prevent Insecure Direct Object References?

I've just gone through the video that presents "A4 Test Insecure DOR Change Secret" and even though I fully understand what the problem is, I don't know how to mitigate it. Can anyone give me an idea ...
bonugoso's user avatar
0 votes
1 answer
50 views

export burp certificate to wireshark for inspection

I am trying to figure out if i can take the burpsuite certificate and export it to wireshark to be able to inspect the traffic going through it. My main goal here is to test a website i own to see ...
Don Schulz's user avatar
0 votes
2 answers
100 views

Which tool to use to automate REST API pentest

I want to run an automated REST API pentest, and I want to integrate my test into CI/CD pipeline. Note: I have the openapi specification of the APIs that I want to test. My automated test will be ...
anonymous's user avatar
0 votes
2 answers
112 views

How to Capture Mobile API Requests in burp when Server side pinning is implemented

I recently encountered a scenario where Mobile Application is generating CSR request, call a POST API request and in response, Ask Server for certificate. Server will respond with the temporary ...
Tejas Pandya's user avatar
0 votes
1 answer
399 views

Burp Suite: alphanumeric payload decoded to base64 exposes password, but as an encoded string

I'm learning Web Pentesting using Juice Shop and I successfully used Burp Suite to generate an SQL injection payload in the repeater that exposed the plain text email and encoded password of the admin....
razimbres's user avatar
  • 101
0 votes
2 answers
95 views

Altering requests after authenticating

In a web mvc application I have the user login and then he is navigated to a View which presents some data fetched from the database based on a unique Id of the user. He can continue to other views to ...
microwth's user avatar
  • 2,483
0 votes
1 answer
324 views

Modifying request responses leading to unauthorized access?

I have been developing some applications lately where the content on the web app is rendered based on the request's response. For example, a user with a "free" plan has limited access, ...
Muhaddis's user avatar
  • 105
0 votes
2 answers
1k views

how to load files in TLS PASS Through in Burp Suite?

I tried to load .txt files in TLS PASS Through but it is not accepting the file type. I tried with (.txt) and (.csv) . The reason behind this is when I open a new project in Burp Suite all time it ...
Swarup Saha's user avatar
0 votes
1 answer
320 views

why the website cant understand my request in http smuggling?

hi I started to find bug bounty vulnerabilities and i think i found a te.cl vulnerability in a website. i send GET / HTTP/1.1 Transfer-Encoding: chunked Host: subdomain.domain.com User-Agent: Mozilla/...
eyal's user avatar
  • 73