Mastering Kali Linux for Web Penetration Testing

Getting particular with proxy

Now, we are ready to begin to use the more automated tools. You may have a preference as to whether you activate the Proxy Intercept or pivot into the Burp Spider first, but I tend toward using Burp Proxy and avoiding spider unless it is a white-box test and the customer is expecting us. With the passive and manual mapping in the target phase, proxy should be able to help us now focus on those areas of the application that we've flagged as potential soft spots in the target's armor. Proxy can be activated by simply toggling to Intercept is on in the Proxy tab's Intercept subtab.

As you surf your sites, Proxy will intercept these requests and allow you to change any of the fields for your own use. This can be ...