Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Burp Suite MasterClass : A practical approach to Burp Suite
Rating: 3.8 out of 5(36 ratings)
278 students

Burp Suite MasterClass : A practical approach to Burp Suite

Advance Penetration Testing Using Burp Suite
Created byJitendra Kumar Singh
Last updated 11/2020
English

What you'll learn

  • You will be able to use Burp Suite
  • You will be able to find many vulnerabilities using Burp suite
  • You will be able to learn some of the best features like creating poc for csrf and clickjacking

Course content

2 sections • 32 lectures • 2h 52m total length

  • Introduction4:40

    Explore Burp Suite as a Java-based graphical tool for testing web apps, with features and CSR generation. Compare community, professional, and enterprise editions, including download options, trial licenses, and limitations.

  • Starting Burp Suite and Configuring it with Browser5:35

    learn how to start Burp Suite, configure its proxy settings with the browser, install the CA certificate, and intercept and log requests to test web applications.

  • OverView to Burp 2.0 Beta8:34

    Burp 2.0 beta introduces automated session handling, multi-login support, and scope control, with scan configurations, a crawler with API integration, and a dom-based vulnerability detector powered by dynamic JavaScript analysis.

  • Spider Tab of Burp Suite0:06
  • New Dashboard of Burp 2.06:45

    Explore the new Burp 2.0 dashboard and configure crawl and audit scans with growth options, limits, login privileges, live audits, and DAF file configurations for automation.

  • Using New Dashboard with Some Practicals5:27

    Learn to use Burp Suite's new dashboard to launch scans, crawl sites, and audit web applications for vulnerabilities, including cross-site scripting and API security.

  • How to use Target Tab5:40

    Navigate Burp Suite's target tab, inspect the site map for discovered content, configure scope and exclusions, and review issue definitions to understand vulnerabilities.

  • How to use Proxy tab18:00

    Explore the Burp Suite proxy tab to intercept, modify, and forward requests and responses, inspect headers and parameters, and use SSL options for testing web applications.

  • How to use Intruder Tab4:44

    Master Burp Suite intruder tab to automate customized tasks with payloads, including brute force and guessing attacks, while configuring requests via the proxy and payload options.

  • Different Types of Attack in Intruder6:57

    Learn to use burp intruder attack types like sniper, battering ram, pitchfork, and cluster bomb, and tailor payload processing with base64 encoding, prefixes, suffixes, and string edits.

  • Adding Rules In Intruder Tab [Full Demo]5:17

    Add rules in the intruder tab, including prefix, suffix, and replace substring, to tailor payloads with base64 encoding and hashing for brute-force testing.

  • Using different type of Options in Intruder6:50

    Explore how to configure intruder options in Burp Suite, toggle connection close, manage large numbers of requests, store or restore payloads and responses, and extract tokens using grep.

  • Scanner Tab of Burp Suite0:07
  • How to use Repeater tab2:55

    Learn to use Burp Suite's repeater tab to resend and modify HTTP requests, including changes to headers, body parameters, and hex values, then observe server responses for testing and debugging.

  • How to use Sequencer tab8:09
  • Using Extender Tab of Burp Suite3:14

    Explore the extender tab to extend Burp Suite by installing third-party extensions from the Burp App Store, enabling additional scanners, security checks, and extended functionality.

  • Using Decoder and Compare Tab of Burp Suite4:49

    Explore Burp Suite's decoder and compare tab to encode or decode data, handle hex, octal, and binary, and compare streams at byte and board levels to identify differences.

  • Wrapping Up Burp6:11

    Master Burp Suite with a practical, hands-on approach to authentication, proxies, interception, and project settings, including cookies, DNS overrides, timeouts, and proxy histories for secure web testing.

  • What You have Learnt

Requirements

  • Laptop with any operating System like windows ,linux Mac etc
  • Burp Suite Pro ( You can use free version as well but some functionality is limited in free version )

Description

Update of Burp 2.0 videos in on the way

In Bug hunting or Pentesting there are two essential things 

  • Your Creative Mind 

  • Perfect Tools

Now Burp Suite is a Multipurpose tool for pentesting I has lot of useful features like repeater, intruder , sequencer.

The point is that how you can use these features in pentesting.

Welcome to this course where I will teach you that how you can use the different modules of Burp Suite in pentesting.

By Burp Suite you can intrude a request can repeat the request with modified parameter value can scan the target. It works as a proxy tool between your browser and the server.

According to some of the Pentester-

"Indispensable tool when performing web application assessments. Read web traffic, then manipulate it as much as you desire."

"Burpsuite is a must-have tool for any Web Application penetration Tester. This should be the baseline from which you do most of your manual testing. The commecial version of the product also offers a number of features and enhancements that will make your life much easier."

In this course we will cover all the modules of Burp Suite their each and every feature how to use them and where to use them.

Excited *-* lets enroll in this course and put you first steps towards Bug Hunting 

Who this course is for:

  • Anyone who want to learn that how to use burp suite
  • Anyone who is starting in Bug Bounties

Report abuse