Collaborate Disseminate
Scenario: I have a Windows Host Machine in which I am running a VMware VM with a Linux distro (Guest Machine). In this Linux distro I am running BurpSuite.
I would like to know how could I be able to intercept the http and https requests t… Continue reading Intercept Host Traffic via Burp Suite (running in a Guest VMWare)
I’m learning Web Pentesting using Juice Shop and I successfully used Burp Suite to generate an SQL injection payload in the repeater that exposed the plain text email and encoded password of the admin.
By using Burp Suite Decoder, I decode… Continue reading Burp Suite: alphanumeric payload decoded to base64 exposes password, but as an encoded string
I’m a total beginner and im trying to solve Portswigger Academy labs. I’m studying on XSS right now and im stuck in somewhere.
Lab Details:This lab demonstrates a reflected DOM vulnerability. Reflected DOM vulnerabilities occur when the s… Continue reading Reflected DOM XSS Portswigger Lab
I want to inject the collaborator payload in the HTTP Host header (HTTP Host header injection).
GET / HTTP/1.1
Host: payload.collaborator.net
The Host header is used to reach the targeted webserver and fetch the vhost or any backend compo… Continue reading How does Burp Collaborator payload reach the targeted vulnerable site?
I’m trying to test a man-in-the-middle attack between two Docker containers.
The local virtual machine has two containers with the same bridging network, I ‘m trying to use burpsuite to intercept their traffic.
I want to use arpspoof to d… Continue reading How to intercept traffic between two Docker containers
We have added HSTS policy at Akamai level (domain). When we Intercept the request using burp we dont see HSTS policy is getting added in response, in case we hit site with http.
But with https we able to see the HSTS policy.
Issue is to fi… Continue reading HSTS Policy Not Appear in Burp Intercept Response
We have added HSTS policy at Akamai level (domain). When we Intercept the request using burp we dont see HSTS policy is getting added in response, in case we hit site with http.
But with https we able to see the HSTS policy.
Issue is to fi… Continue reading HSTS Policy Not Appear in Burp Intercept Response
We have added HSTS policy at Akamai level (domain). When we Intercept the request using burp we dont see HSTS policy is getting added in response, in case we hit site with http.
But with https we able to see the HSTS policy.
Issue is to fi… Continue reading HSTS Policy Not Appear in Burp Intercept Response
Consider this scenario:
I fill a web form and press submit
The server is busy and the request times out
Chrome either drops the request or shows a spinning wheel
When I refresh the page, I need to start over
Is there a way to resubmit th… Continue reading How to resubmit the exact same request in Chrome
A friend asked me to test his site. Trying to test through Burp Suite, the site won’t load, whether I do it through Firefox with the proxy configured or through Burp Suite’s built-in browser.
Please help me understand why this happens and … Continue reading Why doesn’t Burp Suite load the site? [closed]