I've been wanting to use
Portswigger's Burp Suite app for a while and finally had a reason to today so I could pass
this root-me challenge. The key to this challenge was to do a MITM attack and intercept an HTTP POST request sent by a browser and modify the request body. I did this by configuring Burp Suite to serve as a proxy on 127.0.0.1:8080 and then I configured my Macbook's network settings to route all network traffic through this proxy address. Burp suite allows easy modification of http headers and body just like
Telerik's Fiddler app , so it was very straightforward!
No comments:
Post a Comment