Challenges completed
Complete THM room Burpsuite Starter, and Intruder
What I learned
- Learned how Burp Suite works as a proxy between the browser and web server, allowing HTTP traffic to be intercepted and inspected.
- Practised reading HTTP requests and responses, including parameters, headers, cookies, status codes, and response content.
- Used Burp Proxy to capture web traffic and identify where user-controlled input is being sent to the application.
- Learned how to send captured requests to Repeater for manual testing and modification.
- Practised changing request values and resending them to observe how the server responds.
- Developed a better understanding of how vulnerabilities can appear when applications mishandle modified input.
Commands, tools, and techniques
Record useful commands, payloads, filters, or problem-solving techniques.
Problems and dead ends
Explain what did not work and why.
What I will revisit
- More practise on PortSwigger