Results

PROFESSIONAL COMMUNITY

Which Burp Suite Mac installer do you need to download?

In 2020, Apple began introducing a new type of processor for its Mac devices. You need to use a different version of the Burp Suite installer depending on ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

PROFESSIONAL COMMUNITY

Discovering supported hostnames with Burp Suite

You can use Burp Intruder to discover additional, hidden hosts that are in scope but aren't explicitly linked from the initial set of domains you're ...

PROFESSIONAL COMMUNITY

Bypassing client-side controls

Some applications rely on measures on the client side to control the data that they submit to the server. This can lead to significant security flaws, as ...

PROFESSIONAL COMMUNITY

Guessing usernames for known users

Burp Intruder has a built-in username generator that takes an input and produces a list of potential usernames using common patterns. For example, if you ...

PROFESSIONAL COMMUNITY

Troubleshooting Burp extensions

This guide helps you resolve common issues when using Burp extensions. If the troubleshooting steps in this guide don't resolve your issue, please contact ...

PROFESSIONAL COMMUNITY

Viewing requests sent by Burp extensions using Logger

Learn how to see the requests Burp Extensions are making in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Testing for prototype pollution with DOM Invader

Prototype pollution is a JavaScript vulnerability. It enables an attacker to add arbitrary properties to global object prototypes, which may then be ...

PROFESSIONAL COMMUNITY

Submitting scripts to our GitHub repository

Sharing your scripts to our Bambdas repository on GitHub contributes to a shared library of tools for the entire community to use. The submission process is ...

PROFESSIONAL COMMUNITY

Working with WebSocket messages in Burp Repeater

You can use Burp Repeater to manipulate and resend individual WebSocket messages, and analyze the application's responses. To send WebSocket requests with ...