#BURP SUITE LAB SERIES#

Burp Infiltrator is used to targeting application so that Burp can detect cases where its input can pass unsafe APIs on the server-side. It is listed on the site under the ‘Deliberately Vulnerable’ -> ‘Web Apps’ navbar option, and it is called (drumroll….) ‘Juice Shop’. For example, when I took the image below, I had completed 67 labs for a total of 670. Burp Infiltrator is a tool used to target web applications in order to test them using Burp Scanner.

#BURP SUITE LAB SERIES#

For the purposes of the rest of this series the specific section of attackdefense that we will use is the OWASP Juice Shop Vulnerable Web Application (see pun from previous paragraph).

At the time I’m writing this, the site is free to use, and all you need is a Google account. BurpSuite aims to be an all in one set of tools and its capabilities can be enhanced by installing add-ons that are called BApps.

Outside the corporate network and working from home, I have found the responses came back very slowly compared to some other similar labs I have run. It is developed by the company named Portswigger, which is also the alias of its founder Dafydd Stuttard. Burp Suite User Forum Lab: 2FA bypass using a brute-force attack Roman Last updated: 06:39PM UTC I have been working on this one for a while. The best and easiest way to get started with practicing web hacking (that I have found) is to use . Burp or Burp Suite is a set of tools used for penetration testing of web applications. All of this is just the beginning of what will eventually lead to a mastery of Burp Suite, so now is a good time to be excited. (You’ll understand that pun in a second). Maybe even squeeze some “Juice” out of it. After that, we will take a look at scoping our testing and using Burp’s built in crawl and scan tools to try and find some low hanging fruit. To start, we need to set up a good practice target.

This part in the series is going to go over some basic uses of Burp to get you on the road to your first finding. Thankfully, there are many apps to test with online that are free to use in a safe environment. But where do we start? Well, I don’t recommend hitting the open information highway and testing whatever you see. Now it’s time to hit the web and hack some apps. So you made it through Part 1? Congrats on your success – that was the most boring part.

Burp suite lab