Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Burp Suite Essentials
  • Table Of Contents Toc
Burp Suite Essentials

Burp Suite Essentials

By : Akash Mahajan
4.2 (15)
Buy this Book
close
close
Burp Suite Essentials

Burp Suite Essentials

4.2 (15)
By: Akash Mahajan
Buy this Book

Overview of this book

If you are interested in learning how to test web applications and the web part of mobile applications using Burp, then this is the book for you. It is specifically designed to meet your needs if you have basic experience in using Burp and are now aiming to become a professional Burp user.
Table of Contents (13 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Getting Started with Burp
Icon
1. Getting Started with Burp
Icon
Starting Burp from the command line
Icon
Specifying memory size for Burp
Icon
Ensuring that IPv4 is allowed
Icon
Working with other JVMs
Icon
Summary
2
2. Configuring Browsers to Proxy through Burp
chevron up
Icon
2. Configuring Browsers to Proxy through Burp
Icon
Configuring widely used browsers to proxy through Burp Suite
Icon
Summary
3
3. Setting the Scope and Dealing with Upstream Proxies
Icon
3. Setting the Scope and Dealing with Upstream Proxies
Icon
Multiple ways to add targets to the scope
Icon
Scope and Burp Suite tools
Icon
Scope inclusion versus exclusion
Icon
Dropping out-of-scope requests
Icon
Dealing with upstream proxies and SOCKS proxies
Icon
Summary
4
4. SSL and Other Advanced Settings
Icon
4. SSL and Other Advanced Settings
Icon
Importing the Burp certificate in Mozilla Firefox
Icon
Importing the Burp certificate in Microsoft IE and Google Chrome
Icon
Installing the Burp certificate in iOS or Android
Icon
SSL pass-through
Icon
Invisible Proxy
Icon
Summary
5
5. Using Burp Tools As a Power User – Part 1
Icon
5. Using Burp Tools As a Power User – Part 1
Icon
Target
Icon
Proxy
Icon
The Message Analysis tab
Icon
Actions on the intercepted requests
Icon
Intruder
Icon
Scanner
Icon
Repeater
Icon
Summary
6
6. Using Burp Tools As a Power User – Part 2
Icon
6. Using Burp Tools As a Power User – Part 2
Icon
Spidering
Icon
Sequencer
Icon
Decoder
Icon
Comparer
Icon
Alerts
Icon
Summary
7
7. Searching, Extracting, Pattern Matching, and More
Icon
7. Searching, Extracting, Pattern Matching, and More
Icon
Filtering
Icon
Matching
Icon
Grep - Match and Grep - Extract
Icon
Summary
8
8. Using Engagement Tools and Other Utilities
Icon
8. Using Engagement Tools and Other Utilities
Icon
Search
Icon
Target Analyzer
Icon
Content Discovery
Icon
Task Scheduler
Icon
CSRF proof of concept Generator
Icon
Summary
9
9. Using Burp Extensions and Writing Your Own
Icon
9. Using Burp Extensions and Writing Your Own
Icon
Setting up the Python runtime for Burp Extensions
Icon
Setting up the Ruby environment for Burp Extensions
Icon
Loading and installing a Burp Extension from the Burp App Store
Icon
Loading and installing a Burp Extension manually
Icon
Managing Burp Extensions
Icon
Writing our own Burp Extensions
Icon
Noteworthy Burp Extensions
Icon
Summary
10
10. Saving Securely, Backing Up, and Other Maintenance Activities
Icon
10. Saving Securely, Backing Up, and Other Maintenance Activities
Icon
Saving and restoring a state
Icon
Automatic backups
Icon
Scheduled tasks
Icon
Logging all activities
Icon
Summary
11
11. Resources, References, and Links
Icon
11. Resources, References, and Links
Icon
Primary references
Icon
Web application security testing with Burp
Icon
Miscellaneous security testing tutorials with Burp Suite
Icon
Pentesting thick clients
Icon
Testing mobile applications for web security using Burp Suite
Icon
Extensions references
Icon
Books
Icon
Summary
12
Index
Icon
Index

Summary

We successfully intercepted traffic from our browser to Burp Suite. This allows Burp Suite to see each and every request that leaves our browser. For our toolchain, we can use Firefox with the FoxyProxy Standard add-on and ensure that only selective traffic can be sent to Burp Suite. We also configured Internet Explorer, Chrome, and Firefox to proxy traffic through Burp Suite and now, we are ready to go ahead.

The next logical step is to set the scope for our security assessment. While doing assessments, sometimes we need to go through white-listed IP addresses using upstream proxies with Burp. We will cover that in the next chapter.

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Burp Suite Essentials
End of Chapter 2
Next Chapter
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon