3
votes
Burp's collaborator v. private collaborator for bug bounty hunting
I recommend using a private Collaborator server, just because some WAFs block public Collaborator, causing you to miss stuff.
It's also not particularly onerous to operate one yourself, and the ...
- 34.6k
3
votes
Burp's collaborator v. private collaborator for bug bounty hunting
Most pentesting companies specify in their contract with the customer that they won't share any details about the pentest with other parties. If a customer hires a pentesting company, they don't want ...
- 33k
2
votes
export burp certificate to wireshark for inspection
Don't import the certificate as RSA key, but configure it under Protocols > TLS > RSA keys list.
Wrong:
Right:
Furthermore, this only works when the connection uses RSA without forward secrecy....
- 33k
2
votes
Which tool to use to automate REST API pentest
For ZAP you can either use the API packaged scan https://www.zaproxy.org/docs/docker/api-scan/ (which runs in Docker & has a GitHub action) or a custom Automation Framework plan https://www....
- 1,500
1
vote
Edge browser + Docker: proxy settings for Burp Suite
Typically these days with burp, I use the in-built browser, whcih avoids any problems with windows settings, and failing that I'd use firefox which has it's own proxy settings apart from the system.
...
- 62.5k
1
vote
Accepted
Portswigger SSRF basic lab question
As brynk mentioned in the comments, I checked in the dev tools and saw that indeed it is the client that makes the request, since when you press the check stock button, the js code in the webpage ...
- 111
1
vote
How to Capture Mobile API Requests in burp when Server side pinning is implemented
An option that might work here:
Stop the client request that contains the CSR.
Generate your own key pair and CSR, with a private key that you know (lots of tools for this, e.g. openssl).
Edit the ...
- 50.3k
1
vote
How to Capture Mobile API Requests in burp when Server side pinning is implemented
You need the client's private key too (not just the certificate, which contains the client's public key).
You'll probably need some amount of client-side instrumentation (e.g., using Frida) to obtain ...
- 21
1
vote
Accepted
Issue uploading a file with cURL to WebSecurityAcademy Lab on PortSwigger.com
To troubleshoot the 403 error during file upload with cURL, you can try:
Check CSRF Token: The csrf token in your script might be outdated.
Make sure you use a fresh token from a recent request.
...
- 130
1
vote
Accepted
Meaning of the custom http headers in burpsuite academy
what is really going on
Some web server infrastructure will either add or re-write URLs and/or headers at various steps. For example, this is common when routing a request through a reverse proxy (e....
- 50.3k
Only top scored, non community-wiki answers of a minimum length are eligible