Burp suite (from the scratch) Video 6 Video Lecture | Learn all about Burp Suite (English) - IT & Software

alright guys in this video I want to
show you how to use the scanner now the
scanner is mostly everyone's favorite
tool and it's also incredibly powerful
and what it does is it takes a web page
and it scans it automatically to find
vulnerabilities and it searches for a
lot of vulnerabilities if you hop over
in the options real quick you can see a
quick list all of these areas SQL
cross-site scripting header injection um
these are all the parameters for passive
scanning and I'll explain what that is
in just a second but it takes any single
web page and it goes through every
parameter and it checks for all of these
things and then when it's done it
displays the results in a nice organized
list how awesome is that so before we
start clicking running the scanner we
need to understand a few things first of
all if you go in this live scanning tab
and this is a sub tab of scanner you can
set up your scanner to run either live
or you can build your entire site map
first and then say okay here is a target
scan all the pages in here now whenever
you do it live it's pretty much like
manually building your sitemap what's
going to happen is as you browse for
example whenever I go to this new user
page it's going to say ok I'm going to
scan this page in oh here's an injection
point here's an injection point here's
an injection point so as you're browsing
it's going to scan the website live in
real time and try to find any
vulnerabilities and that's a difference
between live scanning which we can see
right here and building your entire site
map and then saying okay we got it out
bill we can just right click it and hit
well I'll talk to you guys about the
different scan options now by either
actively or passively scan this website
so if we go back and scanner in life
scanning we say okay that's when we can
scan but what's the difference between
passive scanning in active scanning well
there's actually a big difference
passive scanning is just this what's
going to happen is what burps going to
do for each page you go to is it's going
to look at the code and just analyze it
it's just going to look at it and it's
going to try to figure out any
vulnerabilities or any holes that we can
exploit all it does is look and analyze
the coat it doesn't send any new request
to the browser all right well then what
is active scanning active scanning is
first of all I just want to warn you
it's kind of dangerous because you can
really mess up a website this way what
this is going to do is you're going to
have burp automatically sent a bunch of
different requests to the website that
you're trying to detect now with each
new request is going to try to find a
vulnerability now first of all well I
say first of all this is like three
minutes into the video but this takes a
lot longer because with passive scanning
you're just requesting something from
the website one time and then looking at
the code with active scanning you're
going to set a bunch of different
requests a bunch of different let's say
SQL injections in seeing what works for
example whenever you have burp actively
scan this page what it's going to do is
it's going to go through every single
injection point every single form
element every single link that you can
pass parameters into the headers and say
that it's going to test for SQL
injection well it's going to test all
the different payloads and I'll explain
what a payload is in just a few
tutorials but it's going to test tick
submit the form tick two equals two
maybe maybe or two we goes to 1 equals 1
any type of injection that you have
selected what it's going to do is it's
going to test it submit it again and see
if it can cause this website to break so
that is the difference between active
scanning and passive scanning again
active scanning be very careful whenever
you use this it's very dangerous it even
says right in the description like this
and like software they always give you a
little description of what the tools do
not often do they're right you cook with
caution right after it so that's how you
know that this is a pretty dangerous
tool and again at
scanning passive scanning the way I
usually like to work is I always have
passive scanning I always like to do
that in live real-time and that's
because you really can't mess up the
site in any way you're just looking at
the data reading it no big issue and
just for this tutorial so you know we
just don't get overwhelmed with too much
information at once i'm going to leave
both of these off which means whenever
i'm browsing the site in real time it's
not going to be analyzing or trying the
hackett in any way and of course you can
always choose to go to your site map and
i'm going to be showing you guys a
couple cool techniques later on but
after you got your site map generated if
you want to actively or passively scan
your target you can do so in that way
too so there you go in the next tutorial
what i'm going to do is I'm going to go
through all these options and show you
guys how to optimize your scanner and
get the most power from it so it's going
to be awesome see you guys next lesson