Bugcrowd University - Introduction to Burp Suite

[@TheFern2]

Bookmarks :) 00:00 Introduction 00:16 Browser Setup 04:35 Burp Setup & Proxy 25:37 Spider 33:04 Intruder 45:08 Repeater 55:30 Decoder 1:00:11 Scanner 1:14:40 So what can you do with Burp? 1:17:05 Manually fuzzing a request (Intruder) 1:18:55 When to fuzz? 1:22:46 Pro Function - Content Discovery 1:25:35 Cookie / Header Lab 1:37:06 For next time!

[@soloh4cker]

Thanks buddy

[@rnmnqrs]

@@khanra17 ungrateful bitch, the mic is OK and the tutorial is awesome.

[@MrDaddyv123]

@@rnmnqrs second that. Troll has zero idea he's listening to an OG

[@hunt3rfr3qt3r7]

Thank you so much

[@ruanjiandiguo]

Love you man.

[@tiville421]

In the new version of Burp “send to Spider option” has changed to a “New scan“. Now in Proxy tab intercept right click on the request to bring up the context menu and click “Scan”. Select scan type “crawl” enter the “URLS to scan

[@muhammedyasilkt6423]

thanku

[@SophieShawntel]

Can I be your apprentice 😢

[@dishendra.]

best burp tutorial for beginners I have seen so far!

[@craigaskew9115]

What an eye-opener. It's great to hear plain English (as close as you can get anyway) explanations and instructions. Subscribed!

[@usamach1546]

best video i have seen so far great content and very clear explanation cheers :)

[@StefanRows]

This is so freaking helpful. Thank you Jason.

[@mrwhosmynameagain]

It doesn't even work anymore the umbrellacorpinternal site doesn't even exit anymore :(((((((((((((

[@KLarsen00]

Great video! Even though I've been using burp for a few months, I still learned some new tricks.

[@niprjct]

I noticed that a lot of projects says that no automated scanning is allowed, does it mean for tools such as Acunetix vulnerability scanner? But Burp-Suite scanner is fine? Thank you

[@Alexander007A]

hello sir. can update the burp suite tutorial, please coz its been along time

[@Bugcrowd]

We've passed along this feedback to our team - thank you for the suggestion!

[@victors202]

As always, great content!! Good job dudes

[@Death_User666]

This is gold

[@ali-celebi]

Excellent video. Thanks Jason!

[@franciskp9117]

The new burp suite community edition comes with an embedded browser. Do you recommend the embedded browser or the browser we configure on our own ?

[@niteshsurana]

Informative one and worth every minute!

[@0xsunil]

lol. i thought you're saying informative as usually h1 platform marks our bugs as informative. xd

[@rakolman]

Is there something detailed in the video that I will not be able to do if I use the community version instead?

[@euanfisher6913]

Fantastic video, thank you.

[@CatherineKarena]

There's not much on how to download and install the CA certificate, note the file extension is .CRT not .CERT.

[@thomasseidel5109]

For the Tabs Intruder and then Payloads, I enter values for Payload Options. Nevertheless, I get the error mewling "No Payloads positions defined." What am I doing wrong? Do I have to insert values into Payload Processing?

[@supersaiyan0x016]

Great initiative.... keep up your good work.....useful for noobs like me 😍

[@gprozac]

Awesome tutorial,Thankyou so much.

[@marcusv.7565]

Im suffering to "ca cert is not valid" how should i do?

[@shubhamwaghmare6550]

Thank you so much for video waiting for the next lecture

[@paulojr1384]

very rich content tnx

[@hvhbot6605]

33:45 It's not that difficult to mimic what burp suite does with the filtering with python

[@coffeebreak4888]

I take it as you have to purchase burp?

[@miss-sw3qu]

How do I use Burp with VPN. I have been using Astrill for a long time and I am not sure if Astrill and Burp can work together... If they cannot work together what other vpn can I use for free with Burp?

[@arjunsharma3248]

I do not that, but I want to know, why would I be using a vpn with burp ? maybe a dumb ques, but I am just starting out :/

[@MasculintyOp]

Forever grateful..❤️

[@chandrakanth4241]

hi i am a web developer, I am totaly new to bug bunty and network security, For me burp suite is very expensive and i don't want to use it. I just want to use kali linux I think it has all the tools that needed to become a bug bounty hunter. do i really need this tool, or i am fine with linux cli tool?

[@javirebeld]

Burp has a free version that do almost all of what the paid version does, and yes you need to use a proxy like burpsuite to do bug bounties, your other option would be to use ZAP, which is open source so is totally free

[@photosynthesis_by_pete4006]

Quality video. Thanks

[@ahmedkasmi7194]

thanks jason😁

[@AnshumanPattnaik]

Thank you so much @jason it's very very helpful...:)

[@DrKeineL]

Thank you!

[@alexanderreyer2134]

The volume could be slightly higher.

[@atifjafri4351]

In burp 2.0 version there is no spider tab .. can anyone help me what's the alternative?

[@sail3sh703]

download version 1.7 its easy and most tutorials are posted in this version of burpsuite

[@atifjafri4351]

@@sail3sh703 Thankyou bro !!

[@sail3sh703]

I also encounterd same problem few months ago

[@atifjafri4351]

@@sail3sh703 Ahan , I have downgraded to 1.7.30 now and its working fine !! Thankyou for your suggestion.

[@nebdar4340]

Where did you download burp pro 1.7?

[@FeederGG]

in the mtach and replace how exactly do i add "bugcrowd" as a user agent cause i dont know why am having issues with that

[@mr_noob5931]

there is no spider option in my burp *i mean tab

[@ligeskityler]

mr_noob Free version is like that

[@SanjayKumar-dy4nu]

Use version 1.7

[@FearlessSec]

mr_noob portswigger.net/blog/burp-2-0-where-are-the-spider-and-scanner They just moved it.

[@mrwhosmynameagain]

@@ligeskityler NAH

[@RedComet666]

thank you so much

[@Siik94Skillz]

umbrellacorp seems to be down, any other page we could safely practice on ? I have another question, when you pentest, should you always do it on a virtual machine, or is it okay with a VPN on a main pc. Because I dual boot Parrot OS. But it says everywhere I shouldnt directly go on vulnerable websites to pentest with a real internet connection hosted by my provider. Any idea if VPN is enough?

[@ingridsophie3738]

yeah VPN should be used and also it is enough.

[@soloh4cker]

Instructor: burp YT captions: *birth*

[@mrwhosmynameagain]

yes

[@omarperez7456]

Awesome 👍

[@markanthonyagudo5688]

Thank you

[@vizhneh]

Thanks !

[@MrNikhilutube]

amazing ...

[@tayyabakhtar6157]

why everyones using the pro version !!

[@kishorekrishna6532]

thanks much

[@abdelrhmanyousri5915]

great , where can i download the slides ?

[@abdelrhmanyousri5915]

OK , I found it in the github thabks

[@arjunsharma3248]

32:48

[@mrwhosmynameagain]

??????????????????

[@bugsydarko4537]

shout out to bob & alice.

[@KingKhan-dc5sv]

50:00

[@mrwhosmynameagain]

?????????????????????

no entendi mucho pero gracias don

[@SecurityTalent]

Thanks

[@panachaiboonyoo1553]

33:04

[@panachaiboonyoo1553]

Thank you so much.

[@timothydisalvo759]

I gotta get drunk to follow this shit gives me to much of a headache. I set everything up exactly how you have it buts not working. My browser wont let me visit anything now because of BURP fml

[@tonyawalker3530]

Retirement

[@mrwhosmynameagain]

You SERIOUSLY need to adjust your volume in videos before uploading. One second the video is so quiet I can barely hear it and then the next second it literally almost blows my speakers out. Jeez louise man wtf not cool at all