Results

PROFESSIONAL COMMUNITY

Installing Burp's CA certificate in Chrome - MacOS

To test applications in your own browser over HTTPS, you need to install Burp Suite's CA certificate. Note These steps are only necessary if you want to use ...

PROFESSIONAL COMMUNITY

Installing Burp's CA certificate in Chrome - Linux

To test applications in your own browser over HTTPS, you need to install Burp Suite's CA certificate. Note These steps are only necessary if you want to use ...

PROFESSIONAL COMMUNITY

Installing Burp's CA certificate in Chrome

To test applications in your own browser over HTTPS, you need to install Burp Suite's CA certificate. Note These steps are only necessary if you want to use ...

PROFESSIONAL COMMUNITY

Installing Burp's CA certificate in Chrome - Windows

To test applications in your own browser over HTTPS, you need to install Burp Suite's CA certificate. Note These steps are only necessary if you want to use ...

PROFESSIONAL COMMUNITY

Manipulating WebSocket handshakes with Burp Suite

A WebSocket handshake is an HTTP message that establishes a WebSocket connection. You can often access additional attack surface by manipulating these ...

PROFESSIONAL COMMUNITY

Setting the initial test scope in Burp Suite

By default, as you use Burp's browser, Burp logs all HTTP or WebSocket messages for further analysis. By setting a scope, you can tell Burp which URLs you ...

PROFESSIONAL COMMUNITY

Testing for web message DOM XSS with DOM Invader

Web message DOM XSS occurs if the destination origin for a web message trusts the sender not to transmit malicious data in the message, and handles the data ...

PROFESSIONAL COMMUNITY

Scoping the effort to audit a website

Before you start testing, it's useful to estimate how much time and effort is required to audit the target website. These are some of the factors that have ...

PROFESSIONAL COMMUNITY

Setting up your extension development environment manually

You can set up your extension development environment to suit your preferences. This page covers the setup requirements and steps. Note If you want a faster ...

PROFESSIONAL COMMUNITY

Testing for OS command injection vulnerabilities

OS command injection is a vulnerability that enables an attacker to execute arbitrary operating system (OS) commands on the server that is running an ...