Begin a web penetration testing journey with this introductory video that launches a series focused on hacking the Gin and Juice shop, a deliberately vulnerable web application from Portswigger. Learn essential Burp Suite fundamentals through a comprehensive crash course covering key features like Interceptor, HTTP History, Repeater, Intruder, and Scanner. Follow along with the vulnerability scanning process, from initial setup and authentication to reviewing and reporting security findings across different severity levels. Perfect for aspiring bug bounty hunters, security researchers, pentesters, and CTF players looking to master web application security testing tools and methodologies.
Getting Started with Burp Suite for Web Penetration Testing - Episode 1
Overview
Syllabus
Intro
Gin & Juice Shop
Burp Suite Crash Course ~5 mins
Burp: What is it?
Burp: Setup/FoxyProxy
Burp: Interceptor
Burp: HTTP History
Burp: Repeater
Burp: Intruder
Burp: Sequencer
Burp: Collaborator
Burp: Decoder
Burp: Comparer
Burp: Logger
Burp: Extensions
Burp: Site map target
Burp: Spider crawler
Burp: Scanner
Burp: Scope
Burp: Crawl and Audit authenticated
Burp: Live audit scoped
Explore website functionality
Waiting for vulnerability scanner
Review scan results
Try to catch more issues
Generate report
Review high/med/low/info issues
Regenerate report
Conclusion
Taught by
CryptoCat
