Burp Suite Tips – Volume 2

So on to the second leg of this journey. You can find the first installment of my Burp Suite Tips series at the following link.

Burp Suite Tips – Volume 1

Viewing Target and Repeater Using Tabs

I much prefer viewing the Target and Repeater tabs using the “Tabs” view over the “Left/Right” split. The default setting for both tabs is the “Left/Right Split”. It looks like the following for the Target tab.

Burp Suite Tips - Target Tab Left/Right Split View

While the tabbed view looks like.

This view configuration is much less cluttered in my opinion. You can switch the Target tab to this view by right-clicking anywhere on the Sitemap, Contents, or Issues section and selecting “View -> Tabs”.

Burp Suite Tips - Target Tab View

The “Left/Right Split” view setting looks like the following for the Repeater tab.

Burp Suite Tips - Repeater Tab Left/Right Split View

While the tabbed view looks like.

Burp Suite Tips - Repeater Tab View

You can switch the Repeater tab to this view by  and selecting “View -> Tabs”.

Repeater Tab View Setting

Auto-scroll to Match in Request/Response Tabs

Something handy to know when searching requests or responses is the auto-scroll feature of the search mechanism. After inputting your search term into the search bar (found at the bottom of the message output), click on the “+” button to access search options, and select “Auto-scroll to match when text changes” to enjoy having Burp jump to the search term you’ve input after sending a request.

Burp Suite Tips - Auto-scroll to Match

The sought-after text will be highlighted.

Burp Suite Tips - Auto-scroll to Match

Request History Navigation in Repeater

Something handy to know is the Repeater tool provides controls that allow you to navigate the request history.

Burp Suite Tips - Repeater History Navigation

Auto-Follow Redirections in Repeater

Repeater will auto-follow 300-level (redirection) responses should you care to have it do so.

Burp Suite Tips - Repeater Auto-Follow Redirection

Target Server Config in Repeater

Something else about the Repeater tab to bear in mind is that you can control what server a particular request is sent to by changing the target server. Click the pencil in the upper-right hand corner of the Repeater tab to alter the target setting.

Burp Suite Tips - Repeater Target Server

Changing the Request Method in Repeater

Quickly change the request method from GET to POST (or vice-versa) by right-clicking anywhere in the request message output and selecting “Change request method.

Burp Suite Tips - Repeater Request Method

This makes changing a GET to a POST very easy.

Burp Suite Tips - Repeater Request Method

Repeating a Request in a Browser

Burp allows you to easily repeat a request and view it in your browser should you want to test how a particular request behaves when rendered by a user agent. Right-clicking anywhere in the request or response side of a message output and selecting “Request in browser” will allow you to access this functionality.

Burp Suite Tips - Repeat Request in Browser

This will provide you with a URL to paste into the address bar of your browser.

Burp Suite Tips - Repeat Request in Browser

Convert a Request to XML/JSON in Repeater

Sometimes it’s a good idea to test if a web application will accept content-types that differ from any default, exhibited behavior. The “Content Type Convertor” extension, easily found in the BApp Store, can make the switching of content-types very easy. Once installed, right-clicking anywhere in the request output will allow you to access its functionality.

Burp Suite Tips - Content Type Convertor BApp Store

Burp Suite Tips - Content Type Convertor BApp Store

Choosing to “Convert to XML”…

Burp Suite Tips - Content Type Convertor

Ends up looking something like.

Burp Suite Tips - Content Type Convertor - XML

And choosing to “Convert to JSON” something like.

Burp Suite Tips - Content Type Convertor - JSON

Naming Tabs in Intruder and Repeater

It’s easy to find yourself in a place where you’ve opened (and actually used) a large number of repeater tabs and are finding it difficult to remember which tab did what. No worries! Burp Suite allows you to name tags. Simply double-click the request tab and input something helpful so you can make your way back to something you’ve long forgotten about.

Burp Suite Tips - Renaming Tabs in Intruder and Repeater

Burp Suite Tips - Renaming Tabs in Intruder and Repeater

Tagged , ,

Leave a Reply

Your email address will not be published. Required fields are marked *