OPSECTLAS you are here: Web
Web

Manual Exploration with Burp Suite

reference

  1. Recon
  2. Enumerate
  3. Foothold
  4. PrivEsc
  5. Lateral
  6. Post-Ex
Burp Setup Checklist
  1. 01Launch Burp → Proxy → Options → Confirm listener on 127.0.0.1:8080
  2. 02Browser: set proxy to 127.0.0.1:8080
  3. 03Import Burp's CA cert into browser (http://burp → CA Certificate)
  4. 04Enable Intercept → browse every page of the app
  5. 05Target → Scope → Add http://<TARGET-IP>
  6. 06Spider (Burp Pro) or manually visit all functionality
What to Map During Manual Browse
  • Every parameter in every form
  • URL parameters (?id=, ?page=, ?file=, ?user=)
  • Cookies and their values
  • API endpoints (/api/, /v1/, /graphql)
  • Admin paths (/admin, /dashboard, /manager, /console)
  • File upload functionality
  • Login forms (SQLi candidates)
  • Search boxes (XSS candidates)
  • Any error messages (version info, paths, stack traces)