Burp suite (from the scratch) Video 14 Video Lecture | Learn all about Burp Suite (English) - IT & Software

alright guys welcome back in in this
video I'm gonna teach you how to use the
sequencer and before we even start
learning how to use it or even what it
is I want to talk to you guys about
something else
real quick so most of the websites that
you go to in your everyday life behind
the scenes almost all of them generate
these random strings these random tokens
and they use these for a bunch of
different stuff say that you want to
change your password well it's going to
generate this random token that you can
use and it's pretty much a security
feature to know that you are the person
that's going to change it and they can
like send it to your email or something
they also generate a random token for
like your session ID or anti CSRF tokens
pretty much anytime they want to
implement some kind of security feature
they almost always generate these random
strings these random tokens now
obviously only the server and you should
know your token that's how it like
verifies your identity that's the point
of a security feature however sometimes
they do so in a not so smart way maybe
they have like a thousand of these
tokens and they're just using the same
ones over and over again
maybe the random and I know you guys
can't see me but I'm doing those little
quote things with my fingers isn't so
random and it's actually a formula that
we can predict really easy so if we can
get a hold of a bunch of these secret
tokens what we can do is we can analyze
them and figure out either how to
predict them or we could figure out the
formula that is made to build them and
essentially once we have that we can log
in to anyone else's account pretty sweet
so let me show you an example of what
these tokens are and how to analyze them
so one of the most common ones is
whenever you log into a site that site
is gonna make this session ID this weird
string of numbers and it's gonna give it
to you so now I have the session ID on
my own computer in any time I'm using
the site I have to send that session ID
along with my request and that's how it
knows hey this is Bucky making that
request why did they do that
well that
way I don't have to send my username and
password over the Internet
and it's a little bit more secure so let
me just log into the site and I'm gonna
hit tuna fish and I'm gonna hit login
and it log me in so now let's hop over
in burps sweets and in the proxy check
this out alright so I'm gonna click on
the responses right here and I'm gonna
huh myself a little bit more room to
work with and check this out
so this is that login form that's the
page that we just saw and we can see
that here was our request here is the
information I gave to it and it's
response was okay
you logged in I'm going to give you an a
session ID so I can identify you it's
pretty much like a weird ID number or a
really long ID number and then after
you're logged in what I did is I
redirected you to portal dot PHP this is
just something that they download from
Google not sure what not important but
that's what happened so what we are
going to do is we know that whenever we
log into the website it gives us this
session ID this ID number however is
this actually random or can we actually
analyze it and figure out for example if
we figured out the formula that makes
this string of text we might be able to
reverse engineer in hack into anyone
else's account since all you need to
access their data is this ID number well
if I right click this and hit Send to
sequencer then this is what we're gonna
do we're essentially gonna log in a
bunch of times over and over and over
again because we know whenever you log
in it gives you a session ID now once we
have enough of them what we can do is we
can run through them all analyze them
and figure out if they are truly random
or if they are predictable so over in
your sequencer what it did whenever we
pass that in is automatically guessed
okay you're probably trying to figure
out this field right here the session ID
now it usually does a pretty good job of
picking the right one but if it ever
gets it wrong then you can just change
it so you're trying to figure out that
which we're not so I'm going to change
it back to here
now all you have to do is hit start live
capture so that's pretty much just gonna
run this script just this so what this
is gonna do is essentially log in over
and over and over again you can see all
the requests that it's making to the
server and it's gonna start collecting
those tokens those session IDs and you
can see right now it has 77 collected
now once it gets to 100 this analyze now
bun is gonna light up in other words it
needs a certain amount of data before it
can actually analyze it you usually want
quite a bit like I recommend over 10,000
to get a really reliable analysis but
once you get to 100 then you can hit
analyze now and it's going to crunch all
the numbers and it's going to give you a
quick summary and for this right here
significance level of 1% estimated to be
116 bits this is actually good and what
this means is that the data those
sessions IDs are random so this is
actually good for the website not very
good for us and let me actually expand
this so you guys can see a little bit
better so there you go that's the basics
of how to use the sequencer and why you
would ever want to capture these session
IDs or secret tokens and in the next
video what I'm gonna do is I'm gonna
show you guys all different settings and
actually what all of this crap actually
means