Collaborate Disseminate
Why ChatGPT is not allowing to intercept the traffic in BurpSuite? What type of security they are using to detect it and not allowing it? As soon as I turn ON foxyproxy (intercept still OFF) I get 403 Forbidden response. I want to learn ab… Continue reading How to intercept ChatGPT requests/response in BurpSuite? [closed]
I am working on the following war game from Defend The Web, which requires me to do a source code review to login as the user memtash. The code is on GitLab here.
Having inspected the source code during this code review, I find this line i… Continue reading How long would this take to bruteforce?
When I try to bypass the security configuration of Natas13 (http://natas13.natas.labs.overthewire.org/ A/P:natas13/lW3jYRI02ZKDBb8VtQBU1f6eDRo6WEj9) while using Burp Suite Community Edition on Windows 10, I’ve found very confusing respons… Continue reading Does Burp Suite affect my request directly?
I want to perform a man in the middle attack in Iot using burpsuite for intercepting the traffic between the iot devices and the broker how can I do it
I am attempting to use a Raspberry Pi Model B+ as a WiFi access point with the IP address of 192.168.0.1. This access point should redirect all HTTP and HTTPS traffic to a different machine with the IP address of 192.168.0.29 on port 8080…. Continue reading How to configure RPi to work as wifi access point that uses a Burp as a proxy? [migrated]
I would like to be able to switch back and forth between the real DNS and maybe setting a local DNS entry so I can manipulate AJAX responses for code security checks.
For instance if the server responds with Ajax on page 1 that page 2 is n… Continue reading How can I manipulate certain server side responses? Specifically Ajax Responses? XXE Attack? Hybrid DNS Resolution?
I’m reading this document and trying to figure out how to install multiple plugin automatically.
How can I automate this step on a new computer?
Where does burpsuite store the plugin files?
Continue reading Install burpsuite extension from cli [closed]
How do you redirect all HTTP requests to Burp Suite?
I am using a Ubuntu OS running on a VM installed on my macOS machine, and I have tried the following IPTables commands to do that, but apparently without any avail:
sudo sysctl net.ipv4…. Continue reading How to redirect all http traffic to Burp Suite?
During scan, the burp suite flagged DOM open redirection vulnerability with the following POC. How can I reproduce it?
Data is read from document.referrer and passed to xhr.send.
The following value was injected into the source:
https://ww… Continue reading How to reproduce following POC of dom based open redirection Vulnerability Flagged by burp suite scan
I’m trying to replicate the vulnerability CVE 2022-21661 on my own website that is resulted vulnerable as according the versions involved, as according wp-scan.
I’m trying to submit a POST request with Burp as described in the POC on Explo… Continue reading CVE 2022-21661 – WP Injection replication