Burp suite (from the scratch) Video 13 Video Lecture | Learn all about Burp Suite (English) - IT & Software

alright guys in this lesson I'm going to
show you how to use the repeater now the
repeater is a really simple tool in burp
suite all it is is a way that you can
manually edit your request so it's like
a text editor for sending a request to
the server now you can either make an
entire request manually or if you have a
previous request then you can just throw
it in here and start editing whatever
you want and then hit go and it sends it
to the server gets the response and it
displays it right here so let me show
you a quick example so let me just log
in I made a account tuna fish let me log
in and I'm just gonna get any old form
let's say that we wanted to test for
like cross-site scripting and hack and
it will give you that page so this is
the page that you can test cross-site
scripting on and let me just use it
regularly like any old user would RA in
your first and last name my name is
Sally Jones what even is this page I
don't know like to sign up for I don't
know like the mailing list whatever so
hit go and it says welcome Sally Jones
alright pretty cool now I'm gonna hop
back in burps we in in my proxy alright
let me sort this by time so it's a
little bit easier to figure out art so
this right here as we can see if we look
at the request this was our original
request the get now you can see in the
header that in this request we passed in
two different values well it passing
some more value such as form equal
submit but what we did is we threw in
Sally and Jones however we got a feeling
in that we may be able to you know
inject some maybe SQL or have some
vulnerability on this form so I'm gonna
right-click it and I'm gonna choose send
to repeater so what that's going to do
is it's essentially you're gonna take
this and throw it right in here so you
can just copy and paste it if you want
but it's pretty handy that you can just
right click and then hit sent to
repeater
whatever you want to do so
is your request right here it's not sent
to the server yet anytime whenever
you're editing it you want to send up
the server just hit go it's gonna send
it to the server and this is the
server's response
all right so nothing really unusual here
it says welcome Sally Jones if you ever
want to say like Sally Jones why would
you want to do that you can do that as
well and this is our response so if we
think that we can do something like um
script alerts and let's just test for
any word I'll just write like bacon then
what we can do is we can throw in
whatever pig load we have hit go and
check it out um all right so this is a
little different we have a bunch of
cross-site scripting and it says welcome
alerts bacon script now obviously this
is good for us because they didn't do
anything to rip out our script tags in
actually if I copy this we can verify
that by going back in and let me just
put Jones hit go and Yelp check that out
we do have a cross-site scripting
vulnerability on this page so
essentially all the repeater is like I
said is a text editor for whenever you
want to manually senate requests one by
one so if you guys are like alright why
would I even ever want that if I can
just use the intruder to send you know
one hundred at once well anytime you've
got something a little weird and you
aren't really sure what happened then
you sometimes want to go back and look
at that one request you say okay this
one's a little bit funny I'm gonna look
at all the code and just change some
things manually and see exactly what's
going on so there you go that's the
quick little skinny on how to use a
repeater and anytime you need to change
either the host or port you can do so
right here up in this little pen icon
button however if you just are in
somewhere else like your proxy
and you right-click in his center
repeater and then its aren't
automatically gonna take the host import
from this and stick it in there for you
so that's another handy little you know
feature they built in many ways that's
the repeater there you go
see you next lesson