With the help of following steps we will be performing manual text-based audits using the Burp Suite Repeater:
- To use Burp Suite Repeater, a request needs to be sent to it from either an en-route capture via an intercept or from the proxy history. With either one of these, right-click on the request and then select Send to Repeater, as shown in the following screenshot:
- In the example provided, a request is made of the user to provide a name, and the server returns the provided input in the HTML response. To test for the possibility of cross-site scripting, we should first inject a series of commonly used characters in such ...