Ravi Sir's Cyber Security Cards › Revision Cards
Burp Intruder: Automating Requests
Burp Intruder: Automating Requests Burp Intruder repeats a request while changing one marked value. Change an ID from 1 to 50 to test for IDOR (seeing other users’ data). The free version is slower, which is fine for a lab. Rate limiting, account lockouts, and IDs that cannot be guessed, plus owners
Read card text
What this card says
What it is
Burp Intruder repeats a request while changing one marked value.
Example
Change an ID from 1 to 50 to test for IDOR (seeing other users’ data).
The free version is slower, which is fine for a lab.
Defence
Rate limiting, account lockouts, and IDs that cannot be guessed, plus ownership checks on the server.
Learn more in the lesson: 21.3 Burp Intruder: Automating Requests