Results

PROFESSIONAL COMMUNITY

Performing HTTP/2-exclusive attacks

When you intercept a request in Burp Proxy, or send it to Burp Repeater, the Inspector enables you to work with HTTP/2 headers and pseudo-headers in a way ...

PROFESSIONAL COMMUNITY

Maintaining extensions on the BApp Store

Once your extension has been accepted into the BApp store, it may require occasional updates to maintain its quality and improve its functionality. To ...

PROFESSIONAL COMMUNITY

Testing for blind SSRF with Burp Suite

Blind server-side request forgery (SSRF) is a vulnerability that allows an attacker to induce an application to send HTTP requests to a specified URL, but ...

PROFESSIONAL COMMUNITY

Troubleshooting common errors within Burp Suite

If you are new to Burp and are having problems, please first read the help on Getting Started with Burp Suite, and follow the instructions there. Otherwise, ...

PROFESSIONAL COMMUNITY

Determining the session timeout

When a user doesn't use an application for a certain amount of time, most applications will automatically log out the user and destroy their session. To ...

PROFESSIONAL COMMUNITY

Setting the initial test scope in Burp Suite

By default, as you use Burp's browser, Burp logs all HTTP or WebSocket messages for further analysis. By setting a scope, you can tell Burp which URLs you ...

PROFESSIONAL COMMUNITY

Getting started with the Inspector

The Inspector makes it easy to view and edit interesting items in HTTP messages. It automatically groups items from the selected request and response pair ...

PROFESSIONAL COMMUNITY

Working with JWTs in Burp Suite

JSON web tokens (JWTs) are a standard format for sending cryptographically signed JSON data between systems. They're commonly used in authentication, ...

PROFESSIONAL COMMUNITY

Modifying HTTP requests with Burp Proxy

Learn how to use Burp Proxy to intercept and modify web traffic in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Setting up your extension development environment manually

You can set up your extension development environment to suit your preferences. This page covers the setup requirements and steps. Note If you want a faster ...