Using Burp Sequencer to test the session randomness

In this recipe, we will learn how to use the Burp Sequencer tool to check the randomness of the session token in web applications.

Getting ready

To step through this recipe, you will need Kali Linux running on Oracle Virtualbox and an Internet connection. No other prerequisites are required.

How to do it...

For this recipe, you need to perform the following steps:

  1. Open the application in the browser and intercept the request using Burp, as shown in the following screenshot:

    How to do it...

  2. We need to analyze the response for the request, forward this request, and capture the response from the server, as shown in the ...

Get Kali Linux Intrusion and Exploitation Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.