book

Burp Suite Cookbook - Second Edition

Name: Burp Suite Cookbook - Second Edition
Author: Dr. Sunny Wear
ISBN: 9781835081075

by Dr. Sunny Wear

October 2023

Intermediate to advanced

450 pages

8h 38m

English

Packt Publishing

Read now

Unlock full access

Burp Suite Cookbook
ContributorsAbout the authorAbout the reviewer
Preface
Who this book is forWhat this book coversTo get the most out of this bookConventions usedSectionsGetting readyHow to do it…How it works…There’s more…See alsoGet in touchShare your thoughtsDownload a free PDF copy of this book
Chapter 1: Getting Started with Burp Suite
Downloading Burp Suite (Community and Professional editions)Getting readyHow to do it...Setting up a web app pentesting labGetting readyHow to do it...How it works…Creating a PortSwigger account to access Web Security AcademyGetting readyHow to do it…Starting Burp Suite at a command line or as an executableHow to do it...How it works...Listening for HTTP traffic using BurpGetting readyHow to do it...How it works...There’s more…
Chapter 2: Getting to Know the Burp Suite of Tools
Technical requirementsSetting the Target Site MapGetting readyHow to do it...How it works...Understanding the message editorGetting readyHow to do it...Repeating with RepeaterGetting readyHow to do it...Decoding with DecoderGetting readyHow to do it...There’s more...Intruding with IntruderGetting readyHow to do it...
Chapter 3: Configuring, Crawling, Auditing, and Reporting with Burp
Technical requirementsEstablishing trust over HTTPSGetting readyHow to do it...There’s more...Setting project configurationsHow to do it…Setting user configurationsHow to do it…How it works…There’s more...Crawling target sitesGetting readyHow to do it...Creating a custom scan scriptGetting readyHow to do it...There’s more...Reporting issuesGetting readyHow to do it...
Chapter 4: Assessing Authentication Schemes
Technical requirementsTesting for account enumeration and guessable accountsGetting readyHow to do it...Testing for weak lockout mechanismsGetting readyHow to do it...Testing for bypassing authentication schemesGetting readyHow to do it...How it works…Testing for browser cache weaknessesGetting readyHow to do it...How it works…Testing the account provisioning process via the REST APIGetting readyHow to do it...How it works…
Chapter 5: Assessing Authorization Checks
Technical requirementsTesting for directory traversalGetting readyHow to do it...How it works...Testing for LFIGetting readyHow to do it...How it works...Testing for RFIGetting readyHow to do it...How it works...Testing for privilege escalationGetting readyHow to do it...How it works...Testing for IDORGetting readyHow to do it...How it works...
Chapter 6: Assessing Session Management Mechanisms
Technical requirementsTesting session token strength using SequencerGetting readyHow to do it...How it works...Testing for cookie attributesGetting readyHow to do it...How it works...Testing for session fixationGetting readyHow to do it...How it works...Testing for exposed session variablesGetting readyHow to do it...How it works...Testing for cross-site request forgeryGetting readyHow to do it...How it works...
Chapter 7: Assessing Business Logic
Technical requirementsTesting business logic data validationGetting readyHow to do it...How it works...Unrestricted file upload – bypassing weak validationGetting readyHow to do it...How it works...Performing process-timing attacksGetting readyHow to do it...How it works...There’s more...Testing for the circumvention of workflowsGetting readyHow to do it...How it works...Uploading malicious files – polyglotsGetting readyHow to do it...How it works...There’s more...
Chapter 8: Evaluating Input Validation Checks
Technical requirementsTesting for reflected cross-site scriptingGetting readyHow to do it...How it works...Testing for stored cross-site scriptingGetting readyHow to do it...How it works...Testing for HTTP verb tamperingGetting readyHow to do it...How it works...Testing for HTTP parameter pollutionGetting readyHow to do it...How it works...Testing for SQL injectionGetting readyHow to do it...How it works...There’s more...Testing for command injectionGetting readyHow to do it...How it works...

Chapter 9: Attacking the Client
Technical requirementsTesting for clickjackingGetting readyHow to do it...How it works...Testing for DOM-based cross-site scriptingGetting readyHow to do it...How it works...Leveraging DOM Invader for testing DOM XSSGetting readyHow to do it...How it works...There’s more...Testing for JavaScript executionGetting readyHow to do it...How it works...Testing for HTML injectionGetting readyHow to do it...How it works...Testing for client-side resource manipulationGetting readyHow to do it...How it works...
Chapter 10: Working with Burp Suite Macros and Extensions
Technical requirementsCreating session-handling macrosGetting readyHow to do it...How it works...Getting caught in the cookie jarGetting readyHow to do it...How it works...Adding great pentester pluginsGetting readyHow to do it...How it works...Creating new issues via the Add & Track Custom Issues extensionGetting readyHow to do it...How it works...See alsoWorking with the Active Scan++ extensionGetting readyHow to do it...How it works...Using Burp Suite extensions for bug bountiesGetting readyHow to do it...How it works...
Chapter 11: Implementing Advanced Topic Attacks
Technical requirementsPerforming XXE attacksGetting readyHow to do it...How it works...Working with JWTsGetting readyHow to do it...How it works...Using Burp Suite Collaborator to determine SSRFGetting readyHow to do it...How it works...See alsoTesting CORSGetting readyHow to do it...How it works...See alsoPerforming Java deserialization attacksGetting readyHow to do it...How it works...Hacking GraphQL using Burp SuiteGetting readyHow to do it...How it works...There’s more...
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare your thoughtsDownload a free PDF copy of this book

Content preview from Burp Suite Cookbook - Second Edition

4 Assessing Authentication Schemes

This chapter covers some basic authentication penetration test cases. For background, authentication is the act of verifying whether a person’s or object’s claim of identity is true. Web penetration testers must make key assessments to determine the strength of a target application’s authentication mechanism. Such tests include username enumeration, guessable accounts, weak lockout mechanisms, authentication bypasses, browser-caching weaknesses, and account provisioning omissions, particularly related to Representational State Transfer (REST) API calls. You will learn how to use Burp Suite to perform such tests.

In this chapter, we will cover the following recipes:

Testing for account enumeration and guessable ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781835081075

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Burp Suite Cookbook - Second Edition

by Dr. Sunny Wear

4

Assessing Authentication Schemes

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.