This ability to edit and resend the same request multiple times makes Repeater ideal for any kind of manual poking around at an endpoint, providing us with a nice Graphical User Interface (GUI) for writing the request payload and numerous views (including a rendering engine for a graphical view) of the response so that we can see the results of our handiwork in action. Alternatively, we could craft requests by hand, much as we would from the CLI ( Command Line Interface), using a tool such as cURL to build and send requests. In layman’s terms, it means we can take a request captured in the Proxy, edit it, and send the same request repeatedly as many times as we wish. In short: Burp Suite Repeater allows us to craft and/or relay intercepted requests to a target at will. Task 2 Repeater What is Repeater?īefore we start using Repeater, it will help to have a good idea of what it does. Note: If you are not using the AttackBox and want to connect to this machine without the VPN, you can do so using this link once the machine has fully loaded and an IP address is displayed. Answer the questions belowĭeploy the machine (and the AttackBox if you are not using your own attack VM), and let’s get started! If you have not used Burp Suite before and have not completed the Burp Basics room, you may wish to do so now before continuing, as this room builds on the foundations covered there.
Finally, we will encounter a series of examples, including a real-world, extra-mile exercise which we will use to consolidate the more theoretical aspects of the room.
#Burp suite repeater tutorial how to#
We will be covering how to use Repeater to manipulate and arbitrarily resend captured requests, as well as looking at some of the niftier options available in this awesome tool. Having covered the basics of using Burp Suite, this room will dive into one of the more powerful aspects of the framework, namely: the Burp Suite Repeater module. Learn how to use Repeater to duplicate requests in Burp Suite Task 1 Introduction Outline
0 kommentar(er)
