Master Burp Suite Like A Pro In Just 1 Hour

[@NiFreZ]

Even when I am not finished with this video I put comment to give this great guide more chance to get into algorithm

[@NetsecExplained]

Glad you liked it!

[@Horstlicious]

Awesome, not one of the thousand "basic" videos, but one with actual content!

[@NetsecExplained]

100% There's plenty of videos that are created by beginners for beginners, but not many for those who work in the field. I try to introduce people into pentesting and network security from a senior's perspective.

[@kobabumga]

really useful, highly comprehensive and detailed guide, lots of detailed not viewed in other guides.I do recommend it

[@wiltonwell]

Thank you very much, I was going to start this topic and decided, and my stop over was the best moment. I am very greatful for all your effort to teach for free, and with work related examples.

[@paca3107]

Man this tutorial rocks! I just started my journey with cyber security (I have frontend and backend background) and I very appreciate that beside of explaining how burp works you are providing very useful info about whole pentesting and finding out the vulnerabilities. Now I am more aware how important its checking requests and sending safe responses.

[@NetsecExplained]

I'm glad this helped! That's exactly what I wish I had when I first started, so I'm making videos like these now.

[@paca3107]

@@NetsecExplained great bro! I will be watching. Your teaching style its very good. thanks

[@shaggy6249]

As someone trying to leverage my knowledge from studying for the ccna into my plan to get into cyber security this video was super helpful in demonstrating some points of attack and possible uses for burp, thank you!

[@NetsecExplained]

I love it! CCNA is how I got started as well. Not many skills transfer, but understanding some of the network background definitely helps as you progress through your journey.

[@bobbydrillboid]

seriously the best pen testing tutorial of any kind I've seen yet, I'm a beginner and know next to nothing about this stuff, but man this was simple and amazing

[@CR7andJP]

Man...this is the first video that was able to teach me this software. Even a course did not made the trick. Thank you sir for your efforts!

[@NetsecExplained]

Glad it helped! That's how I feel about most tutorials, they tend to sound like manuals instead of how the software is used in practice. I'll make more of these for sure.

[@z.7856]

havent finished the video but so far i like it, earlier today i heard some pentesters/bug bounty hunters use burp as their only tool and are still very successful and i wanted to see how. this videos very good , i like the way you explain things.

[@NetsecExplained]

Glad it was helpful.

[@patient8326]

I see I'm not the only one on here with the same thoughts, but wanted to bring a comment (subscribe and liked this video as well) because of how well this was done!! I'm honestly super shocked, someone made a video, got to the meat and potatoes very quickly, provides awesome content, shows you where everything is to follow along, then allows the PERFECT amount of time to complete the follow along portion and be ready for the next block. Truly great job and thank you so much for not being like the rest of YT.

[@NetsecExplained]

This is the most amazing thing I could have read today. Thank you so much!

[@cristianpiano2170]

Insanely helpful! Beats any other tutorial I've seen in almost any other skill. Will watch more of your videos now!

[@zakb.7108]

I juts started my journey as a Blue Sec champion and this tool is incredibly useful. Im just stunned to see what the CE offers already. Nice video by the way. There are stuff that I didn't know that definitely gives a smoother experience while doing reconnaissance.

[@NetsecExplained]

Absolutely! It will also help you to see how things look from an attackers perspective and a developers perspective too.

[@alkaliemetall]

This was an excellent video. It was informative, well structured and presented in a manner that keeps me interested. You speak in a manner that is comfortable for me to listen to. You keep a good pace as you present the information which includes occasionally making short pauses. The presentation had a good structure and you speak with intent, which makes it easy to maintain my attention. You keep filler words to a minimum. Words such as 'um', 'like' and other abominations such as those words. Please keep up the good work, sir! 🎉

[@NetsecExplained]

Fantastic feedback, thank you so much!

[@dedyalamsyah7086]

super best best pentest using burp suite i've seen, seriuosly if you open the class, definietly i'll register.

[@slaozeren8742]

+1

[@MoldyTurtleBurgers]

This is honestly so helpful. I'm really surprised you're not bigger than you are on KZbin.. I love your process of looking at the HTTP history, the highlighting, using the decoder/encoder, everything is so useful. I used to entirely dismiss the HTTP history because of all the ad/analytics requests that flood it and focus solely on interception... not anymore. And another mistake I was making was constantly switching my proxy on/off just to search up various encoders/decoders. Thanks so much.

[@NetsecExplained]

Glad you found it useful. That process works for CTFs but not on real-world pentests.

[@boofy1744]

very good content I used burp suit doing ctf walks throughs but didn't understand what it was actually doing and had to assume what it was doing but I can actually say I understand some of it

[@psionicjake]

I'm so glad I came across your video. It prepared me for a job interview. Thank you so much!

[@ALXStrikers]

My first Burp Suite tutorial and I'm so grateful. Thank you.

[@NetsecExplained]

You're so welcome!

[@nudtanunwarnnissorn]

me too

[@jake2663]

23:25 probably one of the best intro Burp Suites out there thank you for your video

[@NetsecExplained]

Thank you!

[@israname]

I subscribed to the channel just because you asked so nicely. and because I want to know more about burp

[@shivammaurya7011]

Hello bro, This is the Best video on Burp Suite I have seen so far, well constructed and straight to the point, while showing the usage of tools practically, this video tops all man, thanks for uploading, already subscribed, going to share it in my community so other beginners can learn burp too.

[@NetsecExplained]

Glad you liked it!

[@Fahodinho]

7:14 tip: burp added a feature where you can group repeater tabs into folders, it's so helpful for organizing

[@NetsecExplained]

I didn't know that, thanks for letting me know. That would save me from the 50+ tabs I typically make haha

[@reclaimedgracewood]

great video! very helpful. Im very green with burpsuite and this video helps me feel more comfortable with using it

[@bytestalker]

Excellent - concise, well explained. And worth the time. Please keep it up.

[@viktorfredholm7730]

Awesome video, watched countless videos showing features but never really explaining why you do it. Will follow and see your following videos!

[@NetsecExplained]

Awesome, thank you!

[@shivagupta138]

damn that was really helpful, only video on youtube which talks in depth about Burp Suite and that too very well

[@someonefrommars-v1v]

Awesome content, bro! Just wondering, when can we expect the full pentesting methodology video? It's been about 10 months now

[@NetsecExplained]

I'm putting the course together. Since it will be everything that I know about pentesting, I won't be able to release it for free on KZbin.

[@kdrive8213]

Thank you for a FANTASTIC overview of Burp Suite!

[@elaineng7396]

This is awesome and I can't wait to watch your full pentest methodology! Hats up.

[@ammisetty415]

Thanks for the neat and simple Burp Suite explanation, great job!

[@FerdynandErgyPramudani]

Thank you very much, the explanation you have given is very helpful for me in learning the Burpsuite tool👍👍👍

[@NetsecExplained]

Glad it was helpful!

[@isaacphiri6187]

This really helped me understand some things about burpe...🤝Thanks mahn!

[@gitikachandnani8783]

This was an amazing video , loved the concepts explained with the help of examples rather than a basic tutorial. Hey , I am learning cyber security from basics would you recommend a specific path or is there a wat i can contact you for guidance?

[@NetsecExplained]

Depends on what you want to do. I recommend learning the basics and getting a strong foundation. Security+ is an OK place to start, Cisco has their Cyberops certification that I also highly recommend. Then decide if you want to do red team, blue team, forensics, GRC, etc. For blue team, blue team labs has decent training. For pentesting, I'd start with web apps and Portswigger Academy has good (free!) material. If you're not sure what to do, try them both.

[@neel21patel25]

Awesome work sir , need more content on web app security

[@deusxpotatus]

first 30 seconds and I can guess that its going to be a good tutorial, auto subscribed my dude.

[@NetsecExplained]

Love the feedback! Thank you.

[@WAFLogic-TheWebSecConnoisseurs]

Excellent video Netsec Explained! Very detailed so we'll reference this video when we have questions about some Pentesting How Tos. Thank You for putting this out there!

[@leonardosandovallozano1571]

Beautiful, Congratulation Netsec, I have watched a lot of sec videos and this is very usefull

[@dennischristenson3804]

Excellent video. The highlghting using colors is awesome. You have an excellent way of explaining things. This is the best burpsuite video I have ever watched. I subscribed and liked. Keep up the good work.

[@NetsecExplained]

Thank you so much!

[@fariduxxaman]

This is simply magnificent ✨

[@lehlohonolomogagabe6395]

Great tutorial! I enjoyed it and understood everything

[@wolfrevokcats7890]

Really enjoy seing your video with proper timestamp, good explanation which is easy to understand and proper web methodology such as application mapping where I don't see much other tutorial talk about it. Burp colouring, tab renaming, show highlighted items, many more tips. Truly appreciate your effort. Can't wait to see the next video. Quick question, why did you disable payload encoding?

[@NetsecExplained]

That's a good question. It turns out that payload encoding automatically URL encodes your input. This isn't so much of a problem when you're doing numbers or simple strings, but if you're fuzzing email addresses or API endpoints, it can really mess up your results. It's bitten me in the butt enough times that I always turn it off.

[@h4ck3r_SA]

keep going man please do a tutorials of web bugs such as IDOR , XSS etc.. i love YOU ...

[@NetsecExplained]

Sure thing! I plan on redoing my Web Hacker Basics walkthroughs with better quality and more up to date information down the line, since those have been super popular. In the mean time, check them out on my channel.

[@h4ck3r_SA]

@@NetsecExplained perfect !!!

[@insaneenglish4862]

Best of the best! If it's possible pls make full course video about burp)

[@beautifullybrilliant7542]

Online about 2 seconds into the video and I must TYANjust like to say thank you so much for being what you say you are and given what you said you advertise and having your video completely in English! None of this English title bulshit with some language with no subtitles that I have no earthly idea of what's being said! So thank you so much just at least for that

[@PhillipBlanton]

Great video! it was pretty quick and covered a ton of useful stuff about Burp. You earned a sub. Now, How about one focusing on testing APIs?

[@NetsecExplained]

Great idea! I'll do that soon.

[@infosecman]

Keep up the great work. This is what I've been looking for! Favorite channel!!

[@NetsecExplained]

Thank you for the kind words!

[@This-is-esrat-with-an-E]

This is great! You should keep doing this and help us ❤ Subscribed to you to see more content like this, best of luck man!

[@ViktorBludov]

Well done. easy to understand and straight to the point.

[@rakeshray7900]

Great video, thank you. I see video was posted 8 months back, is that still the case that we can't generate targeted report with req/resp and explanation of vulnerability that can be shared with dev team?

[@rafaelhand1056]

Great Video. Best tutorial for beginners

[@mrd6869]

I also use an AI automation built into this.Helps to learn and build vectors. Also the data you accumulate would be great for a RAG setup for the AI.Have it builld datapoints or weird angles.

[@NetsecExplained]

True, but I work on private client sites so RAG is off the table for me. Honestly, I wouldn't recommend it without some proper configuration tuning. The more requests you have, the easier it is to confuse the LLM. But try it and see how it goes. I'm sure bug bounty would be a perfect use case.

[@mrd6869]

@@NetsecExplained .Yeah Im bringing an offsec AI tool to market shortly.Recon,exploitation,post exploitation,it gets into all that.This whole genre is about to explode with AI integrations and machine learning

[@Wolf-ue8qw]

It is really good tutorial thank you. I will also be happy to fully understand what it is like to see a full steps in pentesting and I will wait with anticipation. Thank you again. Subscribing and liking the video.

[@user20-z2i]

Feedback: 1. Consider changing the background music. 2. Adding a brief walkthrough of the challenge at the beginning would be a great addition.

[@NetsecExplained]

Thanks for this! I'll consider both in future videos.

[@trashcan3810]

This is really cool but I was thinking you’d Edit something in the response tab too, I mean not only in the request tab 😊

[@NetsecExplained]

I will sometimes. It helps to think of an application as having a front end and a backend (full details in another video on my channel). 90% of the time you want to edit the request to modify things on the server. Sometimes it is helpful to modify the response if you have a complicated JavaScript front end, but that's not as important since you usually use that to modify the next downstream request anyways. This video showcases what it's like to hack real-world applications and I do this method every day for my job.

[@blueprintuniverse]

Thank you. Very practical application of Burp Suite

[@adityamarapatla1511]

♥️👌👌👌🎉. Excellent very useful. I really liked the voice over. Can you please tell me how and where did you do that voice over settings for smooth and loud voice . Is thier any link please send me . Very helpful video 🎉🎉. Thank you 🌟

[@NetsecExplained]

It's just my voice honestly. You can play with equalizer settings in Audacity if you really want to. There are tons of tutorials online.

[@eto_fridrih]

If you want to learn how to use "Burp" then you should not watch this video. Do not waste your time. much more information can be read in 5 minutes in the text instructions. all the examples given in the lecture will never come across you in real life, and the principles they reveal can be written down in several paragraphs of text on one page of a small notebook. this guy is very good at teaching you but he has big problems with the content of the lesson. This reminded me of the lesson "How to draw a raccoon in 3 steps." step one: draw a line. step two: draw another line. step three: add a raccoon to them. Done. Only in this video you will only be taught to draw lines and straight ones. This criticism is written with respect to the creator of the video and his work

[@NetsecExplained]

I agree, this video isn't for beginners who have not used Burp before. This video is aimed at those who have used Burp but want a better understanding on how professionals use the tool on real-world engagements, beyond what the manual will tell you. I walk through the thought process and methodology and where Burp fits every step of the way.

[@AlabamaLockPicking-Main]

​​​@@NetsecExplainedwhy not add in the title then "not for complete beginners"

[@EmadBadawi-k5u]

Thanks. That was a very good tutorial

[@JpirakasJp007]

its awsome is there any way to donate so we can get more tutorial like this

[@NetsecExplained]

Glad you liked it! Not quite yet, I'm balancing videos with a full time job at a high-paced startup. When I get to a point I can release more regularly, then I will absolutely pour more time into them. For now, give me ideas on topics.

[@abdallahabbas6910]

brother you need to explain everything from the beginning how u installed burp suite and how to configure it then we can continue, sorry I'll have to see another video cuz I'm a beginner .

[@NetsecExplained]

I appreciate your feedback. This video was meant to be of how to use Burp on a simulated pentest assessment. If you need a video on how to install Burp, then this one isn't for you. Best of luck.

[@godofgameonline]

Very helpful video, thank you so much

[@Fahodinho]

woah I didn't know about if none matched, thanks for the tip!

[@NetsecExplained]

Yeah, that was part of their cacheing. That's why you were seeing all those 304 No Changes in response headers

[@s1lv10-94]

Thanks for the video man, really appreciate it.

[@itsinternational6011]

Hey, Excellent tutorial. Just wondering, How much memory is enough to run burp so that it doesn't crash? 24:11

[@NetsecExplained]

I run my VMs with 4GB minimum, but Burp dynamically adjusts. Honestly, JS heavy apps will crash it if they're not optimized websites. So get a laptop with 16GB and you'll be good.

[@moneyman2595]

Such an amazing video thank you!

[@nedabiah]

amazing video! I learned a lot!

[@Monojoe]

This video is critical!

[@saminbinhumayun858]

Want a detailed video on pentest methodology

[@Technology24]

Please make the full video you've promised I love this

[@NetsecExplained]

Will do. I'll put it together as a whole class, that way I can go over everything start to finish.

[@Technology24]

@@NetsecExplained Thanks bro

[@reuelmagistrado5779]

@@NetsecExplained Would love to see your full pentest methodology

[@kheyralsutan3899]

@@NetsecExplained please make this a course in udemy, i'l gladly buy it

[@franciscoramos7391]

Love it. Great job on this video

[@NetsecExplained]

Thank you!

[@janekmachnicki2593]

So precise and professional.Thanks bro !!

[@DADesigns41]

great video. Very informative.

[@Ncryptedx]

This is what a noobie should be looking for 🔥

[@halimataminu1423]

You did a good job, keep it up

[@joy3658]

Great & Real Content.

[@wifeoftaehyungkim5166]

Really useful hope to see more videos like this

[@NetsecExplained]

Glad you liked it!

[@teodorbriceanu8216]

good video. well explained

[@zarrarkhan1987]

Excellent video

[@DjehutimasAsarRa]

Did he do a video on how to get passwords from printer login web interface yet?

[@NetsecExplained]

No, I haven't done that yet.

[@1_23_4__8]

keep going and make more videos on web and pt plz

[@taiquangong9912]

Q: Do you have an interceptor on ?

[@NetsecExplained]

Yes. In the video, there's a few places where I do use the Burp proxy interceptor.

[@Fahodinho]

0:55 I'm interested 100%

[@NetsecExplained]

Glad to hear it. I'll put it together as a course.

[@Black__2710]

We too brov!

[@kubson7689]

Great video. Thanks!

[@NAUSTRADAMUS12]

Bahut bhadhiya

[@vvanja222]

Great video!

[@sufiyanbuiya]

it's awesome video thanks for the video.

[@deepakthakkar5482]

Simply Awesome!

[@abrotechit]

Excellent

[@danmcgirr4210]

Great work!

[@davdaullas3781]

very helpful....

[@ogrimagy]

very clear thanks a lot

[@DeveshChoudhari-k4s]

how did your burp crashed and how did you fixed this

[@NetsecExplained]

My VM ran out of memory 😞

[@Alok_1320]

Can you please help in the HW I made the intercept request of product id 38 but it's not comming Why ?

[@aiseoiv]

Thanks bro 😎 Реально помог👍

[@ObedientStudent242]

PERFECT

[@IgnacioSeveriens]

Thank you

[@adhithpranav6986]

Make the full pentest methodology

[@koalakakes]

good tutorial, many poggers

[@jonathankussman2807]

Awesome video

[@ThembaMasuku-y3l]

is there anyway to get the new usernsme when its changed , i only got the old username