November 2014
Intermediate to advanced
144 pages
3h 6m
English
Decoder tool in Burp Suite does the job of encoding and decoding data. Applications need to encode data while transmitting it or, in many cases, as a security measure. Encoding is not a security measure but a lot of developers mistake it to be.
A simple rule of thumb is that if there is no key present, there is no confidentiality. Since we don't require a key to encode a piece of plain text, we don't require a key to decode.
A web application penetration tester needs to be able to understand the type of encoding that has been applied and then successfully decode the piece of data.
As with all the other tools, we saw that:
Read now
Unlock full access