Collaborate Disseminate
Recently I have encountered that a website I am trying to intercept using Burp suite doesn’t let me process any requests even the API, I wanted to know what kind of WAF or how they managed to do it for blocking intercepted requests. Screen… Continue reading Website do not give permission to intercept using any interceptor tools
I’m using BurpSuite to bruteforce the login credentials for an ASUS router via the router interface page. I’ve found that the login credentials input are only base64 encoded and displayed in the request body. I’m using the Intruder to brut… Continue reading burpsuite see href script in response body
I was doing the following PortSwigger Lab on cross site scripting (XSS).
The following payload works perfectly.
http://foo?'-alert(1)-'
Which is input into the following section of the webpage.
<img src="/resourc… Continue reading How does this PortSwigger lab’s XSS work?
I am busy with the portswigger lab studies, doing "Reflected XSS into HTML context with most tags and attributes blocked".
I successfully fire the print() on myself and the simulated victim, but for extra practice in preparing fo… Continue reading portswigger Lab – Reflected XSS into HTML context with most tags and attributes blocked
I am trying to do this jQuery XSS challenge here by PortSwigger.
They have a good walkthrough for XSS attacks, however I could not find anything on jQuery, which is also a programming language I have no experience in.
The description of th… Continue reading XSS against jQuery PortSwigger challenge
In a web mvc application I have the user login and then he is navigated to a View which presents some data fetched from the database based on a unique Id of the user. He can continue to other views to get more details etc.
After authentica… Continue reading Altering requests after authenticating
I’m currently playing with cmd.jsp webshells on a Java webapp in tomcat.
This is the request (sending via burpsuite)
PUT /path/cmd.jsp HTTP/1.1
Host: 69.69.69.69
Content-Length: 579
<%@ page import="java.util.*,java.io.*"… Continue reading cmd.jsp – Tomcat – Understanding HTTP Status Code (302)
I have been developing some applications lately where the content on the web app is rendered based on the request’s response. For example, a user with a "free" plan has limited access, whereas the user with a "premium" … Continue reading Modifying request responses leading to unauthorized access?
Anyone has any experience with SwitchyOmega and Burp? If I have it enabled within Burp I am unable to intercept requests. Is there a way to resolve this?
Continue reading SwitchyOmega preventing Burp from intercepting
Analyzing an android app’s traffic POST request, it sends some important pieces of data in the form of URL encoding. This is pretty easy to decode and get the data. The data is sent over HTTPS. But is it safe to perform URL encoding of the… Continue reading Burp suite: URL encoding of request body – Is this safe?