-
Hi,
I have tried to using Burp Extention, and run a scan on Burp.
However the web page does not show any information from burp.
Am I doing something wrong?
My Burp Suite version is Professiona…
-
https://1dayluo.github.io/post/wo-de-xue-xi-bi-ji-he-yi-xie-xiang-mu/
🌸我的Notion笔记 & stars list
Burpsuite lab刷题笔记:
https://cubic-brace-c93.notion.site/Learning-Path-2a895d5a8cdd401491aa...
-
很棒的项目!
使用过程中发现通过 Burp 代理扫描可能会造成误报。某些 IP 访问不可达,最后输出的是 Burp 的报错页面,但 status_code 是 200,原代码逻辑会认为是存在漏洞的,但实际上并没有收到目标站点的响应包。(测试时都是 CVE-2018-2894 和 CVE-2019-2725 误报)
可以优化下逻辑,判断返回的是否是 Burp 的报错页面(如下图):
…
-
![image](https://github.com/user-attachments/assets/6d4d7bc3-70d3-4754-878d-f44f8155eec0)
-
Request to add multiple clicks on the POC similar to BurpSuite's ClickBandit where the first button would show up and the user would click it then the POC would hide the first button and show the seco…
-
des-ecb密钥过长会导致加密error,虽然后来我发现des密钥只取8位,自己把密钥缩短能成功加密,也希望插件能自动截断8位后的密钥吧,或者直接设置一个长度限制?
-
I was going through the XSS attempt on N300RT there was different module which has same vulnerability attempt on comment but couldn't find the proper URL for the attack ?
can you post the proper HTTP…
-
发现没有在列表值中注入探测点,所以这部分sql注入没有发现
通过burpsuite和sqlmap是能够发现该问题的
![image](https://user-images.githubusercontent.com/67257251/220088657-b23ab76e-5ef9-494a-8ba3-cc8a2de90519.png)
-
In BurpSuite Pro v2020.5 The AMF tab is not showing up in the request/response pane:
![image](https://user-images.githubusercontent.com/25899014/84269083-9f694180-ab20-11ea-99b2-4225209ce662.png)
…
-
Another shodan match:
Figured since we were matching tools as well...
product:"BurpSuite"
https://www.shodan.io/search?query=product%3A%22BurpSuite%22