Collaborate Disseminate
I’m learning about HTTP request smuggling and for this i’m trying to "break" into a broken site that is running under docker. The architecture of the site is Cache -> NGINX -> site. The Cache layer parses the Content-Length… Continue reading HTTP request smuggling on NGINX gives error 400?
If I put the browser with burp suite and send it to the repeater and there if I change the referral url to any random url is it a vulnerability?
If it is vulnerable, what is the name of the vulnerability?
If it is not vulnerable please jus… Continue reading We intercept browser in burp and change the referral URL, is it a vulnerability? [closed]
When I sent a request such as:
GET /500.aspx?aspxerrorpath=/error.aspx HTTP/1.1
Host: test.com
Burp reports "The application may be vulnerable to DOM-based open redirection:
Data is read from document.location.pathname and passed to … Continue reading Burp DOM-based Open Redirect
I started using Burp’s IP Rotate when I do some tests. Some tools just straight give me firewall block. For example, when using nuclei (or some other tool for content discovery) and proxy to IP Rotate. Does this makes sense or should I do … Continue reading Nuclei via Proxy – Burp Suite IP Rotate
As a cybersecurity enthusiast, I tried to do the following exercise :
A Fortiweb-VM Version 6.3.11 linked to a DVWA (vulnerable platform), with a burp, I took a request of the Fortiweb platform and send it to the repeater :
In the rep… Continue reading CVE-2021-22123 fortiweb bypass?
While testing any site using BurpSuite, if we send any request it will use BurpSuite HTTP "Proxying through BurpSuite" but still we are not fully anonymous, it will still use our original IPv4 address to send requests. So I tried… Continue reading Staying anonymous while using BurpSuite
Using the requests library, I am trying to make request to a url. I’ve set the target to the specific url and checked, "And URL Is in Target Scope" in both Request interception rules and Response Interception rules.
Here’s a snip… Continue reading Not able to see server response when making request using python
Burp Suite detected a reflected XXS, if I use the Repeater and send the request the payload shows up in the response unfiltered, but if I visit the url it gets filtered, is there a way to bypass it or make it work? Thank you (if I show the… Continue reading Reflected XSS detected by Burp Suite not working
I have an iOS device on Corellium (jailbreaked). I’m on OpenVPN. I have Burp running locally and the iOS device has a proxy that runs through my Burp instance.
All the traffic I am seeing is plaintext and not encrypted. Does this mean that… Continue reading iOS App on Corellium going through Burp shows plaintext
How do I combine multiple HTTP requests into one on burp suite? I am trying to do this in Burp Intruder in a way that each request is detected as a separate request but I send it all in one request and everything will come back in one go.
… Continue reading How to combine multiple HTTP requests into one on burp suite?