Book Image

Burp Suite Essentials

By : Akash Mahajan
Book Image

Burp Suite Essentials

By: Akash Mahajan

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
Burp Suite Essentials
Akash Mahajan
Nov, 2014 | 144 pages
No titles found
Table of Contents (19 chapters)
Burp Suite Essentials
Burp Suite Essentials
Credits
Credits
About the Author
About the Author
Acknowledgments
Acknowledgments
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Burp
Getting Started with Burp
Starting Burp from the command line
Specifying memory size for Burp
Ensuring that IPv4 is allowed
Working with other JVMs
Summary
2
Configuring Browsers to Proxy through Burp
Configuring Browsers to Proxy through Burp
Configuring widely used browsers to proxy through Burp Suite
Summary
3
Setting the Scope and Dealing with Upstream Proxies
Setting the Scope and Dealing with Upstream Proxies
Multiple ways to add targets to the scope
Scope and Burp Suite tools
Scope inclusion versus exclusion
Dropping out-of-scope requests
Dealing with upstream proxies and SOCKS proxies
Summary
4
SSL and Other Advanced Settings
SSL and Other Advanced Settings
Importing the Burp certificate in Mozilla Firefox
Importing the Burp certificate in Microsoft IE and Google Chrome
Installing the Burp certificate in iOS or Android
SSL pass-through
Invisible Proxy
Summary
5
Using Burp Tools As a Power User – Part 1
Using Burp Tools As a Power User – Part 1
Target
Proxy
The Message Analysis tab
Actions on the intercepted requests
Intruder
Scanner
Repeater
Summary
6
Using Burp Tools As a Power User – Part 2
Using Burp Tools As a Power User – Part 2
Spidering
Sequencer
Decoder
Comparer
Alerts
Summary
7
Searching, Extracting, Pattern Matching, and More
Searching, Extracting, Pattern Matching, and More
Filtering
Matching
Grep - Match and Grep - Extract
Summary
8
Using Engagement Tools and Other Utilities
Using Engagement Tools and Other Utilities
Search
Target Analyzer
Content Discovery
Task Scheduler
CSRF proof of concept Generator
Summary
9
Using Burp Extensions and Writing Your Own
Using Burp Extensions and Writing Your Own
Setting up the Python runtime for Burp Extensions
Setting up the Ruby environment for Burp Extensions
Loading and installing a Burp Extension from the Burp App Store
Loading and installing a Burp Extension manually
Managing Burp Extensions
Writing our own Burp Extensions
Noteworthy Burp Extensions
Summary
10
Saving Securely, Backing Up, and Other Maintenance Activities
Saving Securely, Backing Up, and Other Maintenance Activities
Saving and restoring a state
Automatic backups
Scheduled tasks
Logging all activities
Summary
11
Resources, References, and Links
Resources, References, and Links
Primary references
Web application security testing with Burp
Miscellaneous security testing tutorials with Burp Suite
Pentesting thick clients
Testing mobile applications for web security using Burp Suite
Extensions references
Books
Summary
Index
Index

Pentesting thick clients

Pentesting thick clients can be done in the following two ways:

Previous Section
End of Section 5
Next Section