Mastering Kali Linux for Web Penetration Testing

Recon with Burp Suite

As with any proxy tool, we'll need to configure our browser's settings to use the appropriate IP address and port number (typically using IP address 127.0.0.1 and port 8080). Luckily for us, the same configuration works for both ZAP and Burp, unless you are planning to chain the proxies. This might be necessary if you have the need to pass traffic through multiple tools or use an external proxy, and details of how you can do this with Burp in the picture are discussed at https://portswigger.net/burp/help/options_connections.html. The OWASP Broken Web Application Virtual Machine (BWA VM) includes multiple applications for testing and training, and we want to focus on just the OWASP Mutillidae application, which provides ...