TGViewer
Channel Public Channel
APT

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat
Open in Telegram
Subscribers
17K
Photos
565
Videos
28
Links
909

Showing posts older than #151 · Back to latest

Older Posts 15 shown
Post #150 146
#BurpHacksForBounties - Day 8/30

Burp Suite Automation through Macros and Using macros in creating sessions for APIs and protected resources.

#infosec #appsec #burp #security #bugbountytips #bugbounty
Post #149 148
n/n
Use cases
- Sites having custom login.
- Useful in writing extender plugins.
- IDOR testing.

Tomorrow we will see how we can automate testing with Macro and burp.
Post #146 150
3/n
Use Macro with sessions.

For all in-scope URLs now, this macro under sessions will run prior to each request.
Post #144 131
2/n
Click Add and proxy tab will open.

Send the requests you want to record.
Click OK.
Macro will be recorded give it a fancy name.
Post #143 135
1/n
Macros in Burp suite are set of recorded requests.

You create that recorded requests by passing request/(s) through proxy first and then selecting set of requests to add to a Macro.

To create a Macro: Project Options -> Sessions -> Macro
Post #142 139
#BurpHacksForBounties - Day 7/30

Macro: A recorded session in Burp Suite

Part 1: What, How & Why?
Part 2: How to use to automate testing?

#infosec #ppsec #bugbounty #bugbountytips #security #burp
Post #141 142
Got a S3 bucket but don't know who is the owner?

Use the below command to check the bucket owner

aws s3api get-bucket-acl --bucket bucket-name

#bugbountytip #bugbountytips #infosec #AWS
Post #138 141
2/n
The best approach is to disable this on Firefox, once and for all.
Trust me this is easy and this wil be your great investment.

Go to about:config and disable this completely.
Post #136 137
1/n
I personally use firefox, and if you have used it as I do, you must have seen a lot of detectportal.firefox.com requests.
They are noisy, you can right-click on that and mark "Do not intercept", but that is not a persistent way either.
in CE you don't have sessions. :(
Post #135 150
0/n
First of all, why?
Why use Firefox if Burp Suite has Chromium browser built-in?

This is because :
- Burp inbuilt chromium does not persist settings on each different run.
- Plugin reinstallation each time
- Can't disable local CORS checks
- It's not flexible etc.
Post #134 146
🚨🚨 #BurpHacksForBounties - Day 6/30

Burp Suite and firefox 🔥🦊 match made in heaven.

Read the shortcomings of in-built browser and how to make firefox silent.
Down here 👇🍺

#infosec #appsec #burp #security #bugbounty #bugbountytips
Post #132 139
#BurpHacksForBounties - Day 5/30

Check intruder, repeater, sequencer, etc response in one shot instead of every time sending the response to browser.

A short but important trick
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →