Collaborate Disseminate
I am running a Audit and Scan Deep Scan of a website using Burp Suite Professional v2023.10.3.7. I have entered the Settings for the scan and went to Application Login, entering credentials for the login screen.
While the scan is occurring… Continue reading What are the steps necessary to configure Burp Suite Crawler/Scan for maintaining login sessions?
currently burp suite scanner found a vulnerability on the website with the following characteristics:
Issue: OS command injection
Severity: High
Confidence: Certain
Issue detail
The login parameter appears to be vulnerable to OS command… Continue reading Blind OS command injection with out-of-band data exfiltration
I am auditing a site with blind injection of commands from the burp suite repeater, the problem is that only the following command responds to me in the following way
nslookup kgji2ohoyw.web-attacker.com
The burpsuite collaborator receive… Continue reading Command Injection Issues [closed]
I’ve been studying how to hack web applications for 1 month, but I can’t find my first vulnerability.
I even managed to get a Burp Suite pro version, with this fancy vulnerability scanner, but all it does is false positives and strange pay… Continue reading Struggling with finding bugs in web applications [closed]
When I make a normal Python request to some site without any proxies, I get a 429 response, which is too many requests. However, when I open up Burpsuite proxy and add:
import requests
# Set up the proxies dictionary for Burpsuite
proxies… Continue reading Burpsuite proxy does not get HTTP error 429 but vanilla python requests do?
How does HTTP Debugger similar to Burp and Fiddler work without a proxy? Is there any other program to intercept http(s) without using a proxy? I would like to examine it.
I’m currently testing a mobile app (suppose it communicates with the domain blablabla.net).
For the purposes of testing this app, I’ve set up an android machine on another netowrk, and I’m currently trying to set up burpsuite from my local… Continue reading Setting up Burpsuite with a machine in another network
I am going through the Burpsuite Academy Training on Serverside security and I came across a section I am not able to grasp fully:
Some application frameworks support various non-standard HTTP headers that can be used to override the URL i… Continue reading Meaning of the custom http headers in burpsuite academy
I have setup my Burp Proxy in Google Chrome using FroxyProxy extension. Now, unless I use the Burp Proxy I am not able to access internet from the browser even when I have Disabled FroxyProxy.
Continue reading Chrome wouldn’t work without Burp Proxy [migrated]
I am trying to write an automated test that runs on all exposed APIs on a server and checks each endpoint for vulnerabilities.
The problem is the server I am testing always has new APIs exposed, so I want my test to automatically detect ne… Continue reading Can Burp detect new REST APIs exposed on a server