Burp Suite Cookbook: Web application security made easy with Burp Suite

Burp Suite Cookbook
Contributors
About the author
About the reviewer
Preface
   Who this book is for
   What this book covers
   To get the most out of this book
   Conventions used
   Sections
      Getting ready
      How to do it…
      How it works…
      There’s more…
      See also
   Get in touch
   Share your thoughts
   Download a free PDF copy of this book
1
Getting Started with Burp Suite
   Downloading Burp Suite (Community and Professional editions)
      Getting ready
      How to do it...
   Setting up a web app pentesting lab
      Getting ready
      How to do it...
      How it works…
   Creating a PortSwigger account to access Web Security Academy
      Getting ready
      How to do it…
   Starting Burp Suite at a command line or as an executable
      How to do it...
      How it works...
   Listening for HTTP traffic using Burp
      Getting ready
      How to do it...
      How it works...
      There’s more…
2
Getting to Know the Burp Suite of Tools
   Technical requirements
   Setting the Target Site Map
      Getting ready
      How to do it...
      How it works...
   Understanding the message editor
      Getting ready
      How to do it...
   Repeating with Repeater
      Getting ready
      How to do it...
   Decoding with Decoder
      Getting ready
      How to do it...
      There’s more...
   Intruding with Intruder
      Getting ready
      How to do it...
3
Configuring, Crawling, Auditing, and Reporting with Burp
   Technical requirements
   Establishing trust over HTTPS
      Getting ready
      How to do it...
      There’s more...
   Setting project configurations
      How to do it…
   Setting user configurations
      How to do it…
      How it works…
      There’s more...
   Crawling target sites
      Getting ready
      How to do it...
   Creating a custom scan script
      Getting ready
      How to do it...
      There’s more...
   Reporting issues
      Getting ready
      How to do it...
4
Assessing Authentication Schemes
   Technical requirements
   Testing for account enumeration and guessable accounts
      Getting ready
      How to do it...
   Testing for weak lockout mechanisms
      Getting ready
      How to do it...
   Testing for bypassing authentication schemes
      Getting ready
      How to do it...
      How it works…
   Testing for browser cache weaknesses
      Getting ready
      How to do it...
      How it works…
   Testing the account provisioning process via the REST API
      Getting ready
      How to do it...
      How it works…
5
Assessing Authorization Checks
   Technical requirements
   Testing for directory traversal
      Getting ready
      How to do it...
      How it works...
   Testing for LFI
      Getting ready
      How to do it...
      How it works...
   Testing for RFI
      Getting ready
      How to do it...
      How it works...
   Testing for privilege escalation
      Getting ready
      How to do it...
      How it works...
   Testing for IDOR
      Getting ready
      How to do it...
      How it works...
6
Assessing Session Management Mechanisms
   Technical requirements
   Testing session token strength using Sequencer
      Getting ready
      How to do it...
      How it works...
   Testing for cookie attributes
      Getting ready
      How to do it...
      How it works...
   Testing for session fixation
      Getting ready
      How to do it...
      How it works...
   Testing for exposed session variables
      Getting ready
      How to do it...
      How it works...
   Testing for cross-site request forgery
      Getting ready
      How to do it...
      How it works...
7
Assessing Business Logic
   Technical requirements
   Testing business logic data validation
      Getting ready
      How to do it...
      How it works...
   Unrestricted file upload – bypassing weak validation
      Getting ready
      How to do it...
      How it works...
   Performing process-timing attacks
      Getting ready
      How to do it...
      How it works...
      There’s more...
   Testing for the circumvention of workflows
      Getting ready
      How to do it...
      How it works...
   Uploading malicious files – polyglots
      Getting ready
      How to do it...
      How it works...
      There’s more...
8
Evaluating Input Validation Checks
   Technical requirements
   Testing for reflected cross-site scripting
      Getting ready
      How to do it...
      How it works...
   Testing for stored cross-site scripting
      Getting ready
      How to do it...
      How it works...
   Testing for HTTP verb tampering
      Getting ready
      How to do it...
      How it works...
   Testing for HTTP parameter pollution
      Getting ready
      How to do it...
      How it works...
   Testing for SQL injection
      Getting ready
      How to do it...
      How it works...
      There’s more...
   Testing for command injection
      Getting ready
      How to do it...
      How it works...
9
Attacking the Client
   Technical requirements
   Testing for clickjacking
      Getting ready
      How to do it...
      How it works...
   Testing for DOM-based cross-site scripting
      Getting ready
      How to do it...
      How it works...
   Leveraging DOM Invader for testing DOM XSS
      Getting ready
      How to do it...
      How it works...
      There’s more...
   Testing for JavaScript execution
      Getting ready
      How to do it...
      How it works...
   Testing for HTML injection
      Getting ready
      How to do it...
      How it works...
   Testing for client-side resource manipulation
      Getting ready
      How to do it...
      How it works...
10
Working with Burp Suite Macros and Extensions
   Technical requirements
   Creating session-handling macros
      Getting ready
      How to do it...
      How it works...
   Getting caught in the cookie jar
      Getting ready
      How to do it...
      How it works...
   Adding great pentester plugins
      Getting ready
      How to do it...
      How it works...
   Creating new issues via the Add & Track Custom Issues extension
      Getting ready
      How to do it...
      How it works...
      See also
   Working with the Active Scan++ extension
      Getting ready
      How to do it...
      How it works...
   Using Burp Suite extensions for bug bounties
      Getting ready
      How to do it...
      How it works...
11
Implementing Advanced Topic Attacks
   Technical requirements
   Performing XXE attacks
      Getting ready
      How to do it...
      How it works...
   Working with JWTs
      Getting ready
      How to do it...
      How it works...
   Using Burp Suite Collaborator to determine SSRF
      Getting ready
      How to do it...
      How it works...
      See also
   Testing CORS
      Getting ready
      How to do it...
      How it works...
      See also
   Performing Java deserialization attacks
      Getting ready
      How to do it...
      How it works...
   Hacking GraphQL using Burp Suite
      Getting ready
      How to do it...
      How it works...
      There’s more...
Index
   Why subscribe?
Other Books You May Enjoy
   Packt is searching for authors like you
   Share your thoughts
   Download a free PDF copy of this book