How do I?

If you've got a general question about using Burp Suite, then this is the best place to ask.

View all

Feature Requests

Burp's pretty great already, but could we make it even better? Let us know.

View all

Burp Extensions

If your query involves a Burp Suite extension (BApp), then this is the forum for you.

View all

Bug Reports

Found a bug in Burp Suite? This is the place to let us know. Our devs will thank you.

View all

Latest posts

Getting the highlighted text in a HttpRequest or Response

Hey, Is it possible with Montoya or any other method in Java to get the highlighted text of a Request/response? I'm wanting to pass/get some highlighted text into a contextmenu event. Appreciate any help!

Open Pro file using Community Edition

Is it possible to open a .burp file, in the Community Edition, that was created via Burp Suite Pro?

HTTP History appear parameter:?category=

Hi, On this page, the video explains testing for SQL injection. When scanning, there is one SQL injection vuln with only path /filter. But when accessing HTTP History, appear parameter:?category= Can you explain...

having Difficulties in solving lab

i am trying to solve this lab Lab: Developing a custom gadget chain for Java deserialization . When i am trying to serialise java cookie i am using your githup main.java in repl.it but i am getting an...

"Remote code execution via polyglot web shell upload "-- not able to read the uploaded file.

I get the below error when i try to Request: GET /files/avatars/polyglot.php HTTP/2 Host: 0aa800930455a9d080976cf8008600a6.web-security-academy.net Cookie: session=29GgwnhPI6n0cQ5tSpupMs9GAHJ8uECa User-Agent:...

Cursor displayed offset to the right of text in high DPI

When running Burp Suite in a high DPI display, using UI scaling, and opening the Repeater tab (for example), trying to place the text box cursor in some text will show it offset to the right, despite any selections or edits...

Folder for loading libraries/modules doesnt seem to work

"java":{ "folder_for_loading_library_jar_files":"path" }, "python":{ "folder_for_loading_modules":"path", "location_of_jython_standalone_jar_file":"path_jython" } This doesn't seem to take effect. I have taken...

Burp scanner missed to exploit a blind SQL injection

Greetings. I was recently working on a blind SQL vulnerability (oracle database). There was 3 vulnerable parameters on the same request. However burp scanner could not always identify the vulnerability and when that happens...

arrow key not working in HTTP history tab

Burp Enterprise Controlling False Positive Action to particular User

Is there a way to restrict false positive action to particular user or group may be using Role.? or if there is another way by which i can restrict False positive marking of issue for user(s) let me know. I tried...

Burp Suite Support Center

Your source for help and advice on all things Burp-related.