Burp suite (from the scratch) Video 8 Video Lecture | Learn all about Burp Suite (English) - IT & Software

all right houses welcome back and in
this video I'm going to teach you how to
use intruder now intruder is for
whenever you have an injection point
whether it's a form element that you can
type into or maybe it's some cookie
value that you want to pass to the
server or maybe it's just some parameter
in the query URL anytime you can have
data and send it to the server and see
what breaks then you usually want to
perform a bunch of different tests a
bunch of different attacks and see if
you can cause some kind of issue or some
kind of security vulnerability so say
for example that you're walking around
school and you saw that admin autofills
in whenever you go to like their I don't
know what a teachers have like a teacher
homepage admin panel whatever so you saw
that this was your user name and now you
have a huge list of passwords that you
want to cycle through maybe pass may be
password may be you one two three four
or five well what you can do is you can
sit here and type them all over and over
and over again but that's gonna take a
long time now say that they didn't have
any information and you just want to
test for maybe SQL injection so you can
add tick tick one tick two equals two
all of your list of SQL injection
parameters you want to throw in here and
test so that's what intruder allows you
to do and for this example I'm going to
show you how to crack a password but
it's the same whether you're tested for
SQL SQL injection cross-site scripting
pretty much most of the vulnerabilities
that you want to test you're gonna have
a huge list to test from and you want to
throw them all in here and see what
breaks so right here since this is our
own website and it's obviously buggy we
can see that the credentials to log in
are B for the login and bug for the
password now obviously we aren't going
to have the credentials printed on
screen most of the time so I'll show you
guys the logical way of how you would
actually use this now the first thing
you always want to do is you just want
to go to this page so I just refresh it
and you just want to try to login
normal so you know that their login is B
and let's try password so PA SS wo Rd
I'm gonna login that's obviously not
gonna work
invalid credentials because the password
is bug so why did I do that why did I do
something that I know wasn't gonna work
well because if you hop over to burp
then what you can do is if you go to
proxy HTTP history sort all of your
requests to the server by time now this
most recent one was the one I just typed
in that was for the login page so here
is our request here's the raw data that
we passed to the server and if you
actually click on parameters you can see
the parameters that we passed in so
where are you so the adjust ease so it's
a little bit easier to read so the
parameter that we passed in for the
login in other words the username was B
and the password I just tried password
alright well in the response we can see
that it says ok it says somewhere
invalid credentials or user not
activated so now we know that whenever
we type in a wrong password this is how
the server behaves this is how it reacts
so what we can do now is we can start
throwing in a bunch of different ones
and if the server ever behaves in a
different kind of way and we get a
different kind of response that's when
we know ok that either means a we found
the right password or B it caused some
kind of error and it's spewing it out
and it's different from how it's
supposed to behave so both of those
things are good I mean it's probably not
good for the website owner if we're
causing a whole bunch of errors but oh
well so how do we do this