Friday, March 15, 2019

Burp Suite

Image result for burp suite community logo

I've been wanting to use Portswigger's Burp Suite app for a while and finally had a reason to today so I could pass this root-me challenge.  The key to this challenge was to do a MITM attack and intercept an HTTP POST request sent by a browser and modify the request body.  I did this by configuring Burp Suite to serve as a proxy on 127.0.0.1:8080 and then I configured my Macbook's network settings to route all network traffic through this proxy address.  Burp suite allows easy modification of http headers and body just like Telerik's Fiddler app , so it was very straightforward!

No comments:

Post a Comment